coindcx

CoinDCX's $16M mystery just got darker — the new accusations point at its own reserve list.

Salus CMO Darcy traced two addresses from CoinDCX's proof-of-reserves report sending funds to the hacker's address, noting the hot wallet kept distributing 15 TRX gas before and after what the exchange calls the breach: "Are you suggesting that the hackers were handling gas funding distribution for you?"

The flows reached OKX (~5.47M USDT), Binance (~2.02M) and Gate (~1.39M) — with some landing at Huione and Xinbi, Telegram marketplaces Elliptic ties to large-scale laundering.

ZachXBT pushed co-founder Gupta to admit a deposit address kept sweeping user funds ~10 months after the July 2025 hack. CoinDCX told Hindu BusinessLine its deposit-sweeping "failed for a particular period," causing "operational losses, which were absorbed by CoinDCX."

Counterweight: CoinDCX says no current wallet was touched and no user funds were lost — but researchers aren't courts.

If the hacker's wallet sat on CoinDCX's own reserve list, who answers for the $16M — the hacker, or the exchange?

#CryptoNews #CoinDCX #ExchangeHack #CryptoSecurity

India's leading crypto exchange is in a public dispute with ZachXBT over $16M that moved last night.

Timeline: on Oct 21 at 23:35 UTC+8, wallets linked to CoinDCX sent ~15.99M USDT and 5,783 TRX to a single Tron address, which then split the funds — some landing at Binance, OKX and Gate, per the transaction report. The flag came from Darcy's post at Salus.

CoinDCX CEO Sumit Gupta says this is not a new hack: the wallets were created in January 2025 and compromised in last year's $44M breach, and the hackers are just reusing old addresses. Users' funds are safe, trading is normal.

But ZachXBT pushed back: one flagged address, he says, kept sweeping user deposits and receiving gas funds as recently as May 2026, and sent funds to CoinDCX's current hot wallet — asking how a "dead" wallet handled user deposits.

Tape: BTC $81,877 (-2.0%/24h), ETH $2,403 (-2.6%/24h) — context only; no market move tied to this.

So why was a "compromised" July 2025 wallet still touching user deposits in May 2026? DYOR. $BTC #CryptoNews #CoinDCX #ExchangeSecurity #CryptoHacks

The on-chain ledger and the exchange’s account no longer add up $TRX

At 23:35 on October 21 (Beijing time), Salus security researcher Darcy reported that a batch of TRON wallets flagged by Arkham as being associated with CoinDCX transferred out approximately 15.99 million USDT and 5,783.81 TRX, worth about $16 million. The largest single transfer, 15,819,002 USDT, first went to an intermediary address, then was split up and routed to deposit addresses at multiple exchanges.

The exchange’s response: Co-founder Sumit Gupta denied that there had been a new security breach, saying the addresses were created in January 2025, compromised in the hack that July, and deactivated afterward.

The questions being raised: On-chain investigator ZachXBT pointed out that one deposit address beginning with "TQKJQ" was still receiving user deposits in April and May 2026 and interacting with a hot wallet. In a clarification posted on October 22, CoinDCX acknowledged that its deposit-scanning and fund-sweeping process for old addresses had indeed failed for a period of time.

Notably, this isn’t the first time CoinDCX has been embroiled in controversy over address management. In July 2025, the exchange was robbed of around $44 million and subsequently offered a 25% bounty for recovering the funds.

Here’s the bottom line: this isn’t a simple choice between “hacked” and “not hacked.” There’s a clear gap between the exchange’s off-chain explanation and the on-chain records—and that gap itself is the most concerning signal.

#CoinDCX #On-chain security
Not investment advice

An address labeled as CoinDCX transferred out 15.99 million USDT, reigniting the “hack” Rashomon saga.
Founder denies it: The address involved was compromised in an old incident in July 2025, not a current hot wallet.
Translation: The coins are moving, but the breach is old. ZachXBT: If the leak was known, why are 15.99 million U still moving?
The damage is to trust: two theft-related incidents in just over a year—withdrawals have people’s hands shaking.
Was that a proper clarification, or did it make things worse? Reply 1 to trust, 2 to run.

$USDT $BTC $ETH
#CoinDCX #交易所安全 #On-chain Detective
(Source: The Defiant)
⚠️Risk warning: The above is shared for market information purposes only and does not constitute investment advice. Investing involves risks; proceed with caution.

【Market Flash】A suspicious movement of 15.99 million USDT, but CoinDCX denies being hacked for a second time. On-chain investigators say that on October 21, an address linked to the exchange transferred approximately 15.99 million USDT and 5,784 TRX. The founder responded that the address in question was exposed in last year’s hack involving approximately $44 million, and that the hacker is reusing an old address—the wallet itself was not compromised. Do you trust the on-chain tracking or the official denial? Share your thoughts in the comments.
$USDT $TRX $BTC
#CoinDCX #链上安全 #Stablecoin
(Source: Coinpedia)
⚠️Risk warning: The above is shared for informational purposes only and does not constitute investment advice. Investing involves risks; please exercise caution.

Came across an update from Cointelegraph: Indian exchange CoinDCX acknowledged that its scheduled sweeping process for old addresses hacked in July 2025 was down for a period, resulting in “operational losses” that the platform will bear itself. Deposits from affected users have been credited.

The issue began when about $16 million on-chain was transferred out of old addresses labeled as belonging to CoinDCX, prompting questions. The platform initially said those addresses had long been decommissioned. ZachXBT pointed out that one of them was still receiving user deposits and transferring them to a hot wallet about 10 months after the incident. The CEO later said the investigation was ongoing and assured users they would not lose money.

Key point: this was not a new hot-wallet hack. People were still depositing to old compromised addresses, and the sweeping process had fallen behind. The loss amount has not been disclosed; the platform says active wallets and cold-wallet custody remain unaffected. For deposits, use only the latest addresses shown in the official app or on the website.

#CoinDCX #ExchangeSecurity

On-chain investigator ZachXBT is sounding the alarm again ⚠️

He publicly called out CoinDCX, an Indian crypto exchange, alleging that its co-founder was involved in fraud and advising users to withdraw their funds as soon as possible.

The timeline is pretty bizarre:
🔸 The exchange initially denied that any assets had been stolen
🔸 It later disclosed that around $16 million had been stolen
🔸 On-chain data also showed user deposits flowing to undisclosed wallets

A reminder: Not your keys, not your coins.
Putting large sums on a small exchange means handing the risk over to someone else.

Would you spread your assets across several platforms?

#ZachXBT #CoinDCX #交易所安全 #On-chainData

CoinDCX Security Incident Concerns: Unclear Fund Flows

Onchain Lens revealed that CoinDCX user deposits may have flowed into undisclosed wallets, leaving their destination a mystery and drawing attention to the security incident. Technical analysis should be approached with caution, and changes in key indicators should be monitored.#CoinDCX #SecurityIncident

ZachXBT took aim at CoinDCX again today: On-chain data shows that one of the exchange’s TRON deposit addresses was still sweeping up customer deposits after being hacked in July 2025—and was still receiving gas to keep it running 10 months later. A huge transfer of 15,819,002 USDT on 10/21 was caught red-handed, totaling about $15.99 million. CEO Sumit Gupta denied it overnight: “Those were old addresses generated in January 2025. They were hacked in July and have nothing to do with current operations. Customer funds are safe.” India’s largest exchange was just hit for $44 million last July, and now the old accounts don’t add up. The standard for settling this is simple: prove it on-chain. Explain where these deposits went and reconcile them with proof of reserves; otherwise, “customer funds are safe” is just talk.#交易所安全 #CoinDCX

CoinDCX is up to its old tricks again 🤡

$16 million was transferred out of wallets labeled as belonging to CoinDCX. The exchange responded: "Those were old wallets that were hacked last July. We stopped using them ages ago, and users' funds are safe."

Then ZachXBT dropped on-chain evidence: one of those "decommissioned" wallets was still collecting user deposits 10 months after the hack.

It's like telling the police your stolen car has been sitting in the garage, only for dashcam footage to show you drifting around the parking lot.

The CEO promised that "users won't lose any funds." Let's hope so—but if they can't even keep track of their own wallets, who's keeping the books? 🐕

#CoinDCX #Bitcoin

The exchange says “user funds are safe,” but an on-chain sleuth has posted transfer records. Watching this showdown unfold last night sent chills down my spine.

Here’s what happened. At 23:35 Beijing time on October 21, security researcher Darcy spotted on-chain that CoinDCX, an Indian exchange, had transferred around 15.99 million USDT and 5,783 TRX from its hot wallet and several deposit addresses to an unfamiliar TRON address. The largest transfer was 15.819 million USDT. Soon after the funds arrived, they were split into dozens of smaller transfers and sent to deposit addresses at several exchanges, including Binance, OKX, and Gate—a classic fund-splitting and transfer tactic.

Today (October 22), CoinDCX issued a statement telling everyone not to panic. It said these addresses were created in January 2025 and exposed during last July’s hack, and that the platform had stopped using them long ago. It said the recent activity had nothing to do with the company and that user funds were safe. CEO Sumit Gupta also spoke out, saying the wallets had not been compromised and urging people not to spread rumors.

But on-chain sleuth ZachXBT came right back with evidence that seemed to contradict the claims. He said this supposedly “abandoned address” was still being used by a liquidity market maker for nearly 10 months after last July’s incident. In April and May this year, it was still receiving ordinary user deposits, and it had repeatedly swept funds into CoinDCX’s current main hot wallet. He also asked where the roughly $15.8 million in customer deposits had gone, saying the exchange still hadn’t clearly accounted for them.

The two sides are now sticking to their own versions of events. There’s still no independent third party able to determine whether a new hack took place or whether users suffered losses. CoinDCX says it’s still investigating.

This really is close to home for every retail investor. First, keeping your money on an exchange means handing the keys to someone else—you can only choose whether to trust the exchange when it says your funds are “safe.” Second, this exchange was hacked for around $44 million last July, and it used the same “user funds are safe” line then. Official statements always have an incentive to downplay bad news. Third, if ZachXBT’s evidence is genuine, an address that had been hacked was still receiving user deposits a year later. That could mean your deposited coins went straight into a hacker’s pocket—the most catastrophic kind of failure in an exchange’s risk controls.

Three things you can do right now. First, don’t leave large amounts of assets sitting on an exchange long-term. Move them into your own wallet or a hardware wallet, and keep only the spare funds you need for trading on the exchange. Second, when an exchange publishes a security announcement, don’t just take its word for it—cross-check it against on-chain sleuths like ZachXBT. On-chain data doesn’t take anyone’s side. Third, don’t keep all your coins on a single exchange. If something happens, withdraw as soon as possible—don’t wait for the official story to be neatly wrapped up before you act.

Are your coins mainly on an exchange or in your own wallet right now? Let’s talk in the comments.

#CoinDCX #钱包安全 #交易所安全 #防骗

—— Web3 investor Kai

Disclaimer: This article is for sharing security information and educational purposes only and does not constitute investment advice. Cryptocurrency trading involves extremely high risks. Please make decisions with caution.

CoinDCX assures users they suffered no losses after suspected $16 million transfers

- CoinDCX says users were not affected after $16 million in transfers came under scrutiny.
- The exchange linked the transfers to wallets compromised in July 2025.
- However, investigators say the addresses remain connected to CoinDCX’s activity.
- The RSS source provided no further details.

#CoinDCX #CryptoNews #BinanceSquare

$btc $eth

#vlikevn #Titanbot

Source: CoinTelegraph

CoinDCX and its co-founder Sumit Gupta issued a statement addressing recent reports of suspicious fund outflows, reiterating that users’ funds are safe. Gupta said the flagged transactions originated from old addresses that were exploited in July 2025 and subsequently abandoned. He stressed that no active CoinDCX hot wallets were compromised and that the transactions resulted from hackers reusing outdated addresses.

However, blockchain investigator ZachXBT quickly disputed this account and provided on-chain evidence. The evidence showed that the flagged deposit addresses remained active with liquidity providers for ten months after the hack, regularly sweeping user deposits, and interacted with CoinDCX’s current hot wallets in April and May 2026—indicating that approximately $15.8 million in user deposits had not been recorded by the exchange. CoinDCX has not provided further comment.

#CoinDCX #用户安全 #Blockchain

CoinDCX and its co-founder Sumit Gupta issued a statement in response to reports of suspicious fund outflows, emphasizing the safety of user funds. The statement said the flagged transactions originated from old addresses that were exploited in July 2025 and have since been abandoned. Gupta said no active CoinDCX hot wallets were compromised and that the transactions resulted from hackers reusing outdated addresses.

However, blockchain investigator ZachXBT quickly disputed this claim, providing on-chain evidence. The evidence showed that the flagged deposit addresses remained active with liquidity providers for ten months after the hack, regularly sweeping user deposits, and interacted with CoinDCX’s current hot wallets in April and May 2026—indicating that approximately $15.8 million in user deposits had not been recorded by the exchange. CoinDCX has not provided further comment.

#CoinDCX #区块链 #User security

CoinDCX and its co-founder, Sumit Gupta, issued a statement in response to recent reports of suspicious fund outflows, reiterating that users’ funds are safe. Gupta said in the statement that the flagged transactions originated from old addresses that were exploited in July 2025 and subsequently abandoned. He stressed that no active CoinDCX hot wallet had been compromised and that the transactions resulted from hackers reusing outdated addresses.

However, blockchain investigator ZachXBT soon challenged this explanation, providing on-chain evidence. The evidence showed that the flagged deposit addresses remained active with liquidity providers for ten months after the hack, regularly sweeping up user deposits, and interacted with CoinDCX’s current hot wallets in April and May 2026—indicating that approximately $15.8 million in user deposits had not been recorded by the exchange. CoinDCX has not yet responded further.

#CoinDCX #区块链 #UserSafety

🕵️ 15.99 million USDT transferred out. CoinDCX says “old addresses”; ZachXBT says they were “still in use in May”

Indian exchange CoinDCX has once again triggered on-chain alarm bells over the past couple of days.

According to on-chain security researcher Darcy, at 23:35 Beijing time on October 21, CoinDCX’s hot wallet and several deposit addresses transferred approximately 15.99 million USDT and 5,783.81 TRX to the same TRON address. The largest transfer was 15,819,002 USDT. Media outlets including BeInCrypto reported that the funds were subsequently split up and sent to deposit addresses at Binance, OKX, and Gate.

CoinDCX’s response: These addresses were created in January 2025 and compromised during the security incident that July. The company says it hasn’t used them since, and that users’ funds are safe. Co-founder Sumit Gupta also said the current wallets were unaffected.
(Additional context: CoinDCX lost approximately $44 million in July 2025.)

But ZachXBT isn’t convinced:
🔹 He says the deposit address TQKJQ was used for about 10 months after the incident last July
🔹 Deposits from users were still being consolidated into CoinDCX’s now-public hot wallet as recently as April and May this year
🔹 According to him, approximately $15.8 million in user deposits “was not accounted for by the team”

The two accounts don’t currently line up. I’m not taking sides and will wait for more on-chain evidence. But there are two things ordinary users should keep in mind:

First, “the address was abandoned long ago” and “the address is still receiving funds” are two different things. If an exchange abandons an address without fully disabling it on the user side, users can still send funds to it.

Second, don’t use “the address you saved last time” to make a deposit. Copy it afresh from the app every time and check the first and last few characters. It costs almost nothing to make this a habit.

When you make a deposit, do you copy the address again each time, or use a frequently used address? 👇

#CoinDCX #链上安全 #USDT #ZachXBT

CoinDCX is passing the buck even faster than it crashed, insisting that an old wallet was to blame. Now that's a fresh excuse. Setting the drama aside, the safest bet is to take charge of your own wallet security—don't trust their bluster.

#CoinDCX #Security #CryptoNews

On-chain investigator Darcy noted that CoinDCX, a well-known Indian cryptocurrency exchange, may have suffered another hack, with losses potentially reaching $16 million. On October 21, 15.99 million USDT and 5,784 TRX were transferred from CoinDCX’s hot wallet and deposit addresses to a TRON address, then distributed across Binance, OKX, and Gate. CoinDCX suffered a $44 million theft in July 2025. The exchange has yet to officially confirm the suspected theft. #CoinDCX #黑客攻击 #Cryptocurrency

CoinDCX is once again suspected of being hacked, with losses potentially reaching $16 million. According to on-chain investigator Darcy, on October 21, 15.99 million USDT and 5,784 TRX were transferred from CoinDCX’s hot wallet and deposit addresses to a TRON address. The funds were then dispersed to Binance, OKX, and Gate. CoinDCX suffered a $44 million theft in July 2025. The suspected theft has not yet been officially confirmed. #CoinDCX #黑客攻击 #Cryptocurrency

India's well-known cryptocurrency exchange CoinDCX may have suffered another hack, with losses potentially reaching $16 million. According to on-chain investigator Darcy, on October 21, 15.99 million USDT and 5,784 TRX were transferred from CoinDCX's hot wallet and deposit addresses to a TRON address. The funds were then dispersed to Binance, OKX, and Gate. CoinDCX suffered a $44 million theft in July 2025. The company has not yet officially confirmed this suspected theft. #CoinDCX #黑客攻击 #Cryptocurrency