April

Million

Coin

ZachXBT

<ul>
 <li>The exchange said it absorbed a 15.99 million USDT loss linked to retired wallet infrastructure.</li>
 <li>Failed sweeping allowed deposits to accumulate in previously compromised addresses.</li>
 <li>The disclosure followed initial denials; the company says customer balances remain unaffected.</li>
</ul>
CoinDCX has confirmed a 15.99 million USDT loss, roughly $16 million, involving wallet infrastructure retired after its July 2025 breach. The exchange said it absorbed the loss, leaving customer balances unaffected. Its October 25 disclosure followed earlier denials from CEO Sumit Gupta, who initially described reports of suspicious outflows as a possible false alarm.<a href="https://coinmarketcap.com/academy/article/coindcx-admits-16m-wallet-loss-ceo-false-alarm?utm_source=chatgpt.com" rel="noopener noreferrer nofollow">&nbsp;</a>
<h2 class="wp-block-heading" id="coindcx-explains-how-deposits-accumulated-in-retired-wallets">CoinDCX explains how deposits accumulated in retired wallets</h2>
According to the<a href="https://coindcx.com/blog/coindcx-news/on-chain-wallet-activity-update-21-oct-2026?utm_source=chatgpt.com" rel="noopener noreferrer nofollow"> official update</a>, some customers continued sending deposits to old addresses despite instructions to use replacements. The company credited their accounts immediately when those deposits arrived.
A separate automated service was supposed to transfer the assets into its primary secure wallet. That process, known as sweeping, failed for an unspecified period, allowing funds to accumulate at an exposed address.
CoinDCX linked the loss to this failure and vulnerabilities in its retired infrastructure. However, the statement did not identify those responsible or explain precisely how they moved the funds.
The distinction matters: crediting a customer account records an obligation, while sweeping moves the assets backing that balance. Completing the first step did not ensure the second had occurred.<a href="https://coindcx.com/blog/coindcx-news/on-chain-wallet-activity-update-21-oct-2026?utm_source=chatgpt.com" rel="noopener noreferrer nofollow">&nbsp;</a>
<h2 class="wp-block-heading" id="coindcx-disclosure-follows-denials-challenged-by-zachxbt">CoinDCX disclosure follows denials challenged by ZachXBT</h2>
Gupta initially<a href="https://x.com/smtgpt/status/2113181173480607981" rel="noopener noreferrer nofollow"> rejected breach reports</a>, saying the flagged addresses had been compromised during the earlier incident. The exchange also maintained that it had stopped using those addresses.
ZachXBT challenged that account, citing activity involving a liquidity provider and transfers into the current hot wallet. He pointed to deposit sweeps during April and May 2026, questioning how the addresses could be considered inactive.
<figure class="wp-block-embed is-type-rich is-provider-x wp-block-embed-x">
 <div class="wp-block-embed__wrapper">
 <blockquote class="twitter-tweet">
 CoinDCX deposit address TQKJQ was in use by a LP for 10 months after your July 2025 incident and swept user deposits + received gas as recent as April &amp; May 2026 to your current public hot wallet. Meaning $15.8M in user deposits was unaccounted for by your team. Why are Indian… <a href="https://t.co/S8WYtGNIjz" rel="noopener noreferrer nofollow">pic.twitter.com/S8WYtGNIjz</a>— ZachXBT (@zachxbt) <a href="https://x.com/zachxbt/status/2113191832561778974?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">October 22, 2026</a>
 </blockquote>
 </div>
</figure>
The company subsequently acknowledged operational losses before publishing the amount. Its latest statement conceded that communication could have been more proactive while investigators reviewed the old systems.
CoinDCX said trading, deposits and withdrawals continued without interruption. It also said customer assets remained protected in segregated cold wallets, which keep custody keys offline.
The exchange plans stronger monitoring of residual infrastructure and renewed reminders about updating deposit addresses. It advised customers to verify the current address in its app or website before every deposit.
<pre class="wp-block-preformatted">Disclaimer: This article is for informational purposes only and does not constitute financial advice. CoinCryptoNewz is not responsible for any losses incurred. Readers should do their own research before making financial decisions.</pre>
&lt;p&gt;The post <a rel="noopener noreferrer nofollow" href="https://coincryptonewz.com/coindcx-confirms-16-million-wallet-loss-after-initial-denials/">CoinDCX Confirms $16 Million Wallet Loss After Initial Denials</a> first appeared on <a rel="noopener noreferrer nofollow" href="https://coincryptonewz.com">Coin Crypto Newz</a>.&lt;/p&gt;

CoinDCX Confirms $16 Million Wallet Loss After Initial Denials

Table of Contents

CoinCryptoNewz

Other articles published on Oct 26, 2026

Join our free newsletter for daily crypto updates!