CoinDCX’s old wallet lost 15.99 million USDT. Don’t reuse old deposit addresses
CoinDCX says it has absorbed the loss, but that doesn’t mean its old addresses are safe again. If you use the platform, stop reusing old deposit addresses and check the latest address in the official app before every deposit.
In an announcement on October 25, the company said it detected an anomaly on the 21st and further discovered unusual activity involving funds in an old wallet on the 22nd. A service that automatically transferred funds had failed, leaving deposits stuck at old addresses and resulting in a loss of 15.99 million USDT. This old system was affected in an incident disclosed in July 2025.
The most important point is the two-step process: according to the company, the platform first credits users’ accounts, then transfers the coins from the old addresses. Completing the first step does not mean the second succeeded. A normal account balance alone cannot verify that the backend custody process is secure.
The company says its current wallets, trading, and user balances were unaffected, but this is not an independent security audit. An on-chain review updated by Bitquery on October 23 showed that the old addresses involved still had consolidation activity on the day of the incident. “Decommissioned” should not be taken to mean there was no movement of funds.
Over the next 72 hours, I’ll be watching for disclosures about the period of failure, the scope of affected addresses, and verification of the fix. If the anomaly extends to current wallets or normal withdrawals, I’ll broaden the risk assessment. I’ll lower my alert level only when both the repair results and reconciliation of user funds can be verified. Updating addresses is a precaution users can take; it does not replace the platform’s responsibility to monitor its old systems.
#资产安全 #CoinDCX #USDT
CoinDCX says it has absorbed the loss, but that doesn’t mean its old addresses are safe again. If you use the platform, stop reusing old deposit addresses and check the latest address in the official app before every deposit.
In an announcement on October 25, the company said it detected an anomaly on the 21st and further discovered unusual activity involving funds in an old wallet on the 22nd. A service that automatically transferred funds had failed, leaving deposits stuck at old addresses and resulting in a loss of 15.99 million USDT. This old system was affected in an incident disclosed in July 2025.
The most important point is the two-step process: according to the company, the platform first credits users’ accounts, then transfers the coins from the old addresses. Completing the first step does not mean the second succeeded. A normal account balance alone cannot verify that the backend custody process is secure.
The company says its current wallets, trading, and user balances were unaffected, but this is not an independent security audit. An on-chain review updated by Bitquery on October 23 showed that the old addresses involved still had consolidation activity on the day of the incident. “Decommissioned” should not be taken to mean there was no movement of funds.
Over the next 72 hours, I’ll be watching for disclosures about the period of failure, the scope of affected addresses, and verification of the fix. If the anomaly extends to current wallets or normal withdrawals, I’ll broaden the risk assessment. I’ll lower my alert level only when both the repair results and reconciliation of user funds can be verified. Updating addresses is a precaution users can take; it does not replace the platform’s responsibility to monitor its old systems.
#资产安全 #CoinDCX #USDT