CoinDCX Hack Update: Exchange Admits $16M Loss, User Impact

CoinDCX Hack Raises Questions About Exchange Security and Trust

CoinDCX has now confirmed that 15.99 million USDT, about $16 million, was drained from retired TRON wallets on October 21. 

The CoinDCX hack update followed questions from Salus CMO Darcy, on-chain investigator ZachXBT and an earlier statement from CEO Sumit Gupta, who first described the reports as a false alarm on October 22. With the $44.2 million lost in July 2025, combined losses are close to $60 million.

Source: Official Blog

The admission matters as much as the figure. In crypto hack news, a reversal within days often costs an exchange more credibility than the theft itself. The CoinDCX hack now doubles as a case study in how early questions from on-chain analysts get handled.

How the CoinDCX Hack Unfolded: A Failed Sweeper and Retired Wallets 

The drained addresses were deposit wallets created early in 2025 and compromised in the July breach, which earlier reporting tied to a server-side intrusion at an operational account. CoinDCX says it retired them afterward, yet some customers kept sending funds there. 

An automated sweeping tool, built to push those deposits into secure storage, then failed for a period. Balances grew until attackers emptied them.

• Amount taken: 15.99 million USDT (about $16 million), plus a small amount of TRX

• Source: around 40 deprecated TRON deposit addresses

• Onward path: a new consolidation address, then OKX, Binance, Gate and other wallets

• July 2025 loss: about $44.2 million

• Combined losses: nearly $60 million

The exchange labels this an operational loss from leftover infrastructure, not a breach of live systems.

Tether Froze $2.21M While $13.78M Had Already Moved to Other Exchanges

According to Bitquery’s on-chain analysis, Tether froze 2.21 million USDT across nine addresses, about 14% of the total. By then, most of the money had moved on. 

• Frozen: $2.21 million

• Already moved: $13.78 million

• Total drained: $15.99 million

Any further CoinDCX recovery depends on more freezes and on tracing the remaining funds.

CoinDCX Hack User Impact: Customer Balances Reported as Unaffected

On the question of user impact, the company says nobody lost money. Reserves covered the full amount, affected deposits were credited, and cold wallets holding customer assets were untouched. 

Trading, deposits and withdrawals continued, according to its October 25 blog post through X announcement. 

Monitoring of decommissioned systems will tighten, and users are being reminded to use only the addresses shown in the app. Independent verification of the reconciliation is limited so far, so these claims rest on the exchange’s own statements. 

(Holding funds on any platform carries custody risk, and nothing here is financial advice.)

ZachXBT Challenged the Denials and Urged Customers to Withdraw Funds

ZachXBT’s analysis challenged the idea that the wallets were fully retired. His tracing showed a deposit address beginning TQKJQ still received user deposits and interacted with CoinDCX’s active hot wallet as late as April and May 2026.

That would leave about $15.8 million unaccounted for by the team for months. He urged customers to withdraw and grouped the exchange with other Indian platforms, WazirX among them, that have faced similar trouble. 

Every crypto exchange hack tests trust, but the CoinDCX hack raises a narrower question: can trading platforms prove that retired wallets are truly dead?

A third-party audit of wallet inventories would carry more weight than another blog post, and it is the clearest path to rebuilding confidence after crypto news today like this. 

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Crypto markets carry significant risk. Always do your own research before making any investment decisions.