CoinDCX Hack Update: Why No Refund Is Needed After $16M Loss

CoinDCX Security News: Wallet Upgrades, Phishing Warnings, and Refunds

The latest CoinDCX hack update comes with a clear answer on money. The exchange absorbed the full loss of about $16 million, or 15.99 million USDT, and says no customer needs a refund. 

Source: CEO Sumit Gupta Official Post

The funds left old wallet infrastructure on or around 21 October 2026.  The Indian exchange says it paid the entire loss from its own reserves and that no customer lost money. 

For crypto hack news, that is the headline. The cause is a quieter story about aging deposit addresses and a sweeping tool that stopped working.

CoinDCX Hack Update: How Old Deposit Addresses Led to a $16M Drain

Key facts from the CoinDCX security incident, based on official updates and incident reports:

• Loss: about $16 million (15.99 million USDT)

• Timing: on or around 21 October 2026

• Source of funds: deprecated deposit addresses tied to the July 2025 breach

• Customer impact: none, according to the exchange 

• Not compromised: active wallets and segregated cold wallets 

CoinDCX’s official note, on October 28, said it is strengthening its wallet management systems and backend infrastructure following the incident. The exchange confirmed that deposits, withdrawals, and trading continue to operate normally, while any required maintenance will be announced through its app or website. 

How Old Deposit Addresses Led to the Drain and the Sweeping Failure 

The CoinDCX security incident traces back to retired deposit addresses tied to the July 2025 breach. Some users kept sending funds to them, and the exchange still credited those deposits to their accounts. 

An automated sweep was meant to shift the money into active primary wallets. It failed for a period, so the funds sat in the weaker legacy setup until attackers emptied it. 

On-chain analysts have asked why those addresses stayed live for so long. The exchange has not answered that question in full. 

Why Customers Need No Refund Claim After the Exchange Covered the Loss

The latest CoinDCX update says affected deposits were credited to user accounts. The exchange covered the gap itself, which is why it has not opened a reimbursement form. 

CEO Sumit Gupta also admitted that calling the incident a false alarm too early was his mistake.

The latest CoinDCX hack update includes practical steps for customers:

• Suspect a problem? Contact support through the app, the website or @CoinDCX_Cares, with transaction details.

• Depositing? Copy the current address from the app or website every time, and never reuse one from old history.

• Received an unexpected email? Treat it as phishing. The exchange has issued a warning.

• Maintenance? Short windows may follow, announced only on the official app and website.

The crypto exchange says backend work is under way to tighten how wallets and infrastructure are managed, mostly out of sight. Similar security gaps matter across the industry, and this crypto exchange hack 2026 case shows how a forgotten address can become the weak link.

The next test is transparency. A clear account of why the old addresses stayed active, and proof that the sweeping system now has safeguards, would do more to rebuild trust than any assurance. Until then, every CoinDCX hack update will be judged on details rather than promises.

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Crypto markets carry significant risk. Always do your own research before making any investment decisions.