Security

WazirX

TRON

ZachXBT

Impact

<h2 id="span-style-font-size-16px-color-inherit-font-weight-bolder-coindcx-hack-rais-span-span-style-font-size-16px-color-inherit-font-weight-bolder-span-span-style-font-size-16px-color-inherit-font-weight-bolder-span-span-style-font-size-16px-color-inherit-font-weight-bolder-es-questions-about-exchange-security-and-trust-span">CoinDCX Hack Raises Questions About Exchange Security and Trust</h2>
CoinDCX has now confirmed that 15.99 million USDT, about $16 million, was drained from retired TRON wallets on October 21.&nbsp;
The CoinDCX hack update followed questions from Salus CMO Darcy, on-chain investigator ZachXBT and an <a href="https://www.coingabbar.com/en/coindcx-hack-dollar16m-on-the-move-but-is-anyone-hacked" rel="noopener noreferrer nofollow">earlier statement</a> from CEO Sumit Gupta, who first described the reports as a false alarm on October 22. With the $44.2 million lost in July 2025, combined losses are close to $60 million.
<img alt="CoinDCX Confirmed 15.99 million USDT Hack" src="https://d3iuzwoiyg9qa8.cloudfront.net/webadmin/storage/public/commonEditerImage/30djsXvlRUZTryrQjh7HeusH8APFQDd6QpnBmBzq.png" width="300" height="339" title="CoinDCX Confirmed 15.99 million USDT Hack">
Source: <a href="https://coindcx.com/blog/coindcx-news/on-chain-wallet-activity-update-21-oct-2026" rel="noopener noreferrer nofollow">Official Blog</a>
The admission matters as much as the figure. In crypto hack news, a reversal within days often costs an exchange more credibility than the theft itself. The CoinDCX hack now doubles as a case study in how early questions from on-chain analysts get handled.
<h3 id="span-span-style-font-size-16px-how-the-coindcx-hack-unfolded-a-failed-sweeper-and-retired-wallets-span-span">How the CoinDCX Hack Unfolded: A Failed Sweeper and Retired Wallets&nbsp;</h3>
The drained addresses were deposit wallets created early in 2025 and compromised in the July breach, which <a href="https://www.coingabbar.com/en/crypto-currency-news/crypto-exchange-coindcx-hack-44m-stolen-in-major-breach" rel="noopener noreferrer nofollow">earlier reporting</a> tied to a server-side intrusion at an operational account. CoinDCX says it retired them afterward, yet some customers kept sending funds there.&nbsp;
An automated sweeping tool, built to push those deposits into secure storage, then failed for a period. Balances grew until attackers emptied them.
<ul>
 <li>Amount taken:15.99 million USDT (about $16 million), plus a small amount of TRX</li>
 <li>Source: around 40 deprecated TRON deposit addresses</li>
 <li>Onward path:a new consolidation address, then OKX, Binance, Gate and other wallets</li>
 <li>July 2025 loss: about $44.2 million</li>
 <li>Combined losses: nearly $60 million</li>
</ul>
The exchange labels this an operational loss from leftover infrastructure, not a breach of live systems.
<h3 id="span-span-style-font-size-16px-tether-froze-2-21m-while-13-78m-had-already-moved-to-other-exchanges-span-span">Tether Froze $2.21M While $13.78M Had Already Moved to Other Exchanges</h3>
According to&nbsp;<a href="https://bitquery.io/investigations/coindcx-hack" rel="noopener noreferrer nofollow">Bitquery’s on-chain analysis</a>, Tether froze 2.21 million USDT across nine addresses, about 14% of the total. By then, most of the money had moved on.&nbsp;
<ul>
 <li>Frozen:$2.21 million</li>
 <li>Already moved: $13.78 million</li>
 <li>Total drained: $15.99 million</li>
</ul>
Any further CoinDCX recovery depends on more freezes and on tracing the remaining funds.
<h3 id="span-span-style-font-size-16px-coindcx-hack-user-impact-customer-balances-reported-as-unaffected-span-span">CoinDCX Hack User Impact: Customer Balances Reported as Unaffected</h3>
On the question of user impact, the company says nobody lost money. Reserves covered the full amount, affected deposits were credited, and cold wallets holding customer assets were untouched.&nbsp;
Trading, deposits and withdrawals continued, according to its October 25 blog post through <a href="https://x.com/CoinDCX/status/2114214560848888011" rel="noopener noreferrer nofollow">X announcement</a>.&nbsp;
<img alt="CoinDCX Hack Update" src="https://d3iuzwoiyg9qa8.cloudfront.net/webadmin/storage/public/commonEditerImage/hzrBx6SVnbVET56qmiIDk226rHhwgliGKrHQ4qIK.png" width="300" height="180" title="CoinDCX Hack Update">
Monitoring of decommissioned systems will tighten, and users are being reminded to use only the addresses shown in the app. Independent verification of the reconciliation is limited so far, so these claims rest on the exchange’s own statements.&nbsp;
(Holding funds on any platform carries custody risk, and nothing here is financial advice.)
<h3 id="span-span-style-font-size-16px-zachxbt-challenged-the-denials-and-urged-customers-to-withdraw-funds-span-span">ZachXBT Challenged the Denials and Urged Customers to Withdraw Funds</h3>
<a href="https://x.com/zachxbt/status/2113264816546873716?s=20" rel="noopener noreferrer nofollow">ZachXBT’s analysis</a> challenged the idea that the wallets were fully retired. His tracing showed a deposit address beginning TQKJQ still received user deposits and interacted with CoinDCX’s active hot wallet as late as April and May 2026.
That would leave about $15.8 million unaccounted for by the team for months. He urged customers to withdraw and grouped the exchange with other Indian platforms, WazirX among them, that have faced similar trouble.&nbsp;
Every crypto exchange hack tests trust, but the CoinDCX hack raises a narrower question: can trading platforms prove that retired wallets are truly dead?
A third-party audit of wallet inventories would carry more weight than another blog post, and it is the clearest path to rebuilding confidence after crypto news today like this.&nbsp;
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Crypto markets carry significant risk. Always do your own research before making any investment decisions.&nbsp;

CoinDCX Hack Update: Exchange Admits $16M Loss, User Impact

Table of Contents

Coingabbar

Other articles published on Oct 26, 2026

Join our free newsletter for daily crypto updates!