CoinDCX is an Indian cryptocurrency exchange dedicated to making crypto accessible in a simple way. Established in 2018, CoinDCX has solved many problems faced by the Indian crypto community with solutions for crypto investing, trading, and literacy.
CoinDCX has issued an announcement stating that it detected anomalous system activity on October 21, and subsequent investigation confirmed that the anomalous activity affected legacy wallet infrastructure that had been deprecated following the July 2025 security incident. CoinDCX stated that due to a malfunction in the automated fund sweeping service that lasted for a period of time, some user deposits mistakenly sent to old addresses were not transferred in a timely manner, ultimately resulting in a loss of 15.99 million USDT, with the related losses borne by the company.CoinDCX emphasized that existing wallets and trading systems were unaffected, user funds remain securely held in isolated cold wallets, and trading, deposit, and withdrawal services all continue to operate normally.
According to monitoring by Salus, Tether has blacklisted nine addresses linked to the CoinDCX security incident and frozen approximately 2.2129 million USDT. The investigation was triggered by an anomalous transfer, and subsequent on-chain evidence prompted Tether to implement the freeze.
Onchain Lens posted on X questioning CoinDCX's so-called hack incident, stating that CoinDCX may have undisclosed fund anomalies—user deposits had flowed into a wallet that was not included in the relevant fund accounting, after which nearly equivalent funds were transferred out; some funds were also moved through less common cross-chain bridge entry points and services, indicating abnormal pathways.Onchain Lens further pointed out that some funds suspected to be related to CoinDCX hot wallets flowed through over-the-counter (OTC) services and mixing platforms, and questioned that the CoinDCX team still denied the occurrence of a security incident even after multiple researchers and on-chain investigators presented relevant evidence.
CoinDCX stated that recent claims on platform X regarding certain wallet addresses and transactions are misleading. The related transactions involve legacy wallet addresses created in January 2025 and compromised in July of the same year, which the platform ceased using thereafter. It asserted that recent on-chain activity is unrelated to its operations and that user funds remain secure. In response, on-chain investigator ZachXBT countered that CoinDCX's deposit address TQKJQ remained in use by liquidity providers for approximately 10 months following the July 2025 incident. These addresses continued to receive user deposits and gas fees in April and May 2026, subsequently transferring the funds to CoinDCX's currently disclosed hot wallet. He raised questions over how the CoinDCX team failed to account for the whereabouts of approximately $15.8 million in user deposits.
CoinDCX stated that platform futures trading has resumed normal operations across all markets. However, as a precaution, trading for SOPH, ERA, GTC, and LA remains in Reduce-Only mode for INR and USDT trading pairs. CoinDCX noted that, in light of the earlier incident involving global liquidity providers, the platform's risk management team will continue to monitor these tokens to guard against potential market manipulation and abnormal volatility.
CoinDCX stated that, due to a recent incident involving a global liquidity provider, platform futures trading has temporarily entered Reduce-Only mode as a precautionary measure. During this period, users will be unable to open new positions or increase existing ones, but can still adjust margin, reduce, or close positions. CoinDCX also confirmed that user funds are safe, with deposit and withdrawal services operating normally. Latest developments will be announced through official channels.
As reported by CoinDesk, Indian cryptocurrency exchange CoinDCX has confirmed a loss of $16 million. The incident occurred because its sweeping process failed to withdraw customer deposits from wallets compromised in a July 2025 hack. The exchange stated it would absorb the loss itself and confirmed that active users' funds remain secure.
CoinDCX has issued an announcement stating that it detected anomalous system activity on October 21, and subsequent investigation confirmed that the anomalous activity affected legacy wallet infrastructure that had been deprecated following the July 2025 security incident. CoinDCX stated that due to a malfunction in the automated fund sweeping service that lasted for a period of time, some user deposits mistakenly sent to old addresses were not transferred in a timely manner, ultimately resulting in a loss of 15.99 million USDT, with the related losses borne by the company.CoinDCX emphasized that existing wallets and trading systems were unaffected, user funds remain securely held in isolated cold wallets, and trading, deposit, and withdrawal services all continue to operate normally.
Onchain Lens posted on X questioning CoinDCX's so-called hack incident, stating that CoinDCX may have undisclosed fund anomalies—user deposits had flowed into a wallet that was not included in the relevant fund accounting, after which nearly equivalent funds were transferred out; some funds were also moved through less common cross-chain bridge entry points and services, indicating abnormal pathways.Onchain Lens further pointed out that some funds suspected to be related to CoinDCX hot wallets flowed through over-the-counter (OTC) services and mixing platforms, and questioned that the CoinDCX team still denied the occurrence of a security incident even after multiple researchers and on-chain investigators presented relevant evidence.
Indian crypto exchange CoinDCX has released an update on the on-chain activity of the TQKJQ wallet, stating that following the July 2025 security incident, some previously generated deposit addresses were compromised and deactivated, yet some users continued to transfer crypto assets to these expired addresses. The platform would normally periodically sweep such funds for accounting and safekeeping purposes, but the relevant process failed for a period of time and was discovered this morning, resulting in certain operational losses for the platform, which CoinDCX will bear.CoinDCX stated that despite users depositing to expired addresses, the accounts of affected users have all been credited accordingly. The platform said user funds remain safe, customer assets continue to be held in separate cold wallets, the active addresses currently used by the platform and users are unaffected, and platform funds in active wallets have not been compromised. Currently, the CoinDCX platform and all trading activities are operating normally. The platform reminds users to verify the latest deposit addresses through the official app or website to avoid transferring funds to deactivated addresses.
As reported by CoinDesk, Indian cryptocurrency exchange CoinDCX has confirmed a loss of $16 million. The incident occurred because its sweeping process failed to withdraw customer deposits from wallets compromised in a July 2025 hack. The exchange stated it would absorb the loss itself and confirmed that active users' funds remain secure.
CoinDCX has issued an announcement stating that it detected anomalous system activity on October 21, and subsequent investigation confirmed that the anomalous activity affected legacy wallet infrastructure that had been deprecated following the July 2025 security incident. CoinDCX stated that due to a malfunction in the automated fund sweeping service that lasted for a period of time, some user deposits mistakenly sent to old addresses were not transferred in a timely manner, ultimately resulting in a loss of 15.99 million USDT, with the related losses borne by the company.CoinDCX emphasized that existing wallets and trading systems were unaffected, user funds remain securely held in isolated cold wallets, and trading, deposit, and withdrawal services all continue to operate normally.
According to monitoring by Salus, Tether has blacklisted nine addresses linked to the CoinDCX security incident and frozen approximately 2.2129 million USDT. The investigation was triggered by an anomalous transfer, and subsequent on-chain evidence prompted Tether to implement the freeze.
According to on-chain anti-money laundering monitoring platform AMLBot, Tether has frozen approximately $2.2 million worth of USDT related to the hacking incident at cryptocurrency exchange CoinDCX, involving multiple on-chain addresses.
Onchain Lens posted on X questioning CoinDCX's so-called hack incident, stating that CoinDCX may have undisclosed fund anomalies—user deposits had flowed into a wallet that was not included in the relevant fund accounting, after which nearly equivalent funds were transferred out; some funds were also moved through less common cross-chain bridge entry points and services, indicating abnormal pathways.Onchain Lens further pointed out that some funds suspected to be related to CoinDCX hot wallets flowed through over-the-counter (OTC) services and mixing platforms, and questioned that the CoinDCX team still denied the occurrence of a security incident even after multiple researchers and on-chain investigators presented relevant evidence.
Indian crypto exchange CoinDCX has released an update on the on-chain activity of the TQKJQ wallet, stating that following the July 2025 security incident, some previously generated deposit addresses were compromised and deactivated, yet some users continued to transfer crypto assets to these expired addresses. The platform would normally periodically sweep such funds for accounting and safekeeping purposes, but the relevant process failed for a period of time and was discovered this morning, resulting in certain operational losses for the platform, which CoinDCX will bear.CoinDCX stated that despite users depositing to expired addresses, the accounts of affected users have all been credited accordingly. The platform said user funds remain safe, customer assets continue to be held in separate cold wallets, the active addresses currently used by the platform and users are unaffected, and platform funds in active wallets have not been compromised. Currently, the CoinDCX platform and all trading activities are operating normally. The platform reminds users to verify the latest deposit addresses through the official app or website to avoid transferring funds to deactivated addresses.
CoinDCX has issued an announcement stating that it detected anomalous system activity on October 21, and subsequent investigation confirmed that the anomalous activity affected legacy wallet infrastructure that had been deprecated following the July 2025 security incident. CoinDCX stated that due to a malfunction in the automated fund sweeping service that lasted for a period of time, some user deposits mistakenly sent to old addresses were not transferred in a timely manner, ultimately resulting in a loss of 15.99 million USDT, with the related losses borne by the company.CoinDCX emphasized that existing wallets and trading systems were unaffected, user funds remain securely held in isolated cold wallets, and trading, deposit, and withdrawal services all continue to operate normally.
Indian crypto exchange CoinDCX has released an update on the on-chain activity of the TQKJQ wallet, stating that following the July 2025 security incident, some previously generated deposit addresses were compromised and deactivated, yet some users continued to transfer crypto assets to these expired addresses. The platform would normally periodically sweep such funds for accounting and safekeeping purposes, but the relevant process failed for a period of time and was discovered this morning, resulting in certain operational losses for the platform, which CoinDCX will bear.CoinDCX stated that despite users depositing to expired addresses, the accounts of affected users have all been credited accordingly. The platform said user funds remain safe, customer assets continue to be held in separate cold wallets, the active addresses currently used by the platform and users are unaffected, and platform funds in active wallets have not been compromised. Currently, the CoinDCX platform and all trading activities are operating normally. The platform reminds users to verify the latest deposit addresses through the official app or website to avoid transferring funds to deactivated addresses.
CoinDCX stated that platform futures trading has resumed normal operations across all markets. However, as a precaution, trading for SOPH, ERA, GTC, and LA remains in Reduce-Only mode for INR and USDT trading pairs. CoinDCX noted that, in light of the earlier incident involving global liquidity providers, the platform's risk management team will continue to monitor these tokens to guard against potential market manipulation and abnormal volatility.
CoinDCX stated that, due to a recent incident involving a global liquidity provider, platform futures trading has temporarily entered Reduce-Only mode as a precautionary measure. During this period, users will be unable to open new positions or increase existing ones, but can still adjust margin, reduce, or close positions. CoinDCX also confirmed that user funds are safe, with deposit and withdrawal services operating normally. Latest developments will be announced through official channels.
As reported by CoinDesk, Indian cryptocurrency exchange CoinDCX has confirmed a loss of $16 million. The incident occurred because its sweeping process failed to withdraw customer deposits from wallets compromised in a July 2025 hack. The exchange stated it would absorb the loss itself and confirmed that active users' funds remain secure.
CoinDCX has issued an announcement stating that it detected anomalous system activity on October 21, and subsequent investigation confirmed that the anomalous activity affected legacy wallet infrastructure that had been deprecated following the July 2025 security incident. CoinDCX stated that due to a malfunction in the automated fund sweeping service that lasted for a period of time, some user deposits mistakenly sent to old addresses were not transferred in a timely manner, ultimately resulting in a loss of 15.99 million USDT, with the related losses borne by the company.CoinDCX emphasized that existing wallets and trading systems were unaffected, user funds remain securely held in isolated cold wallets, and trading, deposit, and withdrawal services all continue to operate normally.
According to monitoring by Salus, Tether has blacklisted nine addresses linked to the CoinDCX security incident and frozen approximately 2.2129 million USDT. The investigation was triggered by an anomalous transfer, and subsequent on-chain evidence prompted Tether to implement the freeze.
According to on-chain anti-money laundering monitoring platform AMLBot, Tether has frozen approximately $2.2 million worth of USDT related to the hacking incident at cryptocurrency exchange CoinDCX, involving multiple on-chain addresses.