CoinDCX Hack Claim: $16M Moved, Exchange Says No Breach
CoinDCX Hack Claim Update: Where Did the $16M in USDT Go?
The CoinDCX Hack question returned on October 21, when on-chain investigator Darcy flagged about $16 million in USDT leaving addresses linked to the Indian exchange. The money landed in a single TRON wallet before moving toward Binance, OKX and Gate.
CoinDCX says this is not a new breach, and no fresh theft has been officially confirmed. So, what’s the situation right now?
CoinDCX Hack Claim: What On-Chain Data Shows About the $16M Trail
Darcy, who is chief marketing officer at security firm Salus, traced the transfers to wallets labeled as CoinDCX hot wallets and deposit addresses, per his official X post. The key details:
Date: October 21, 2026
Amount: about 15.99 million USDT and 5,784 TRX
Largest single transfer: 15.82 million USDT
First stop: one TRON address
Next stop: funds split and sent to deposit addresses at Binance, OKX and Gate
Splitting funds and sending them to exchange deposits is a standard laundering step. It also gives those exchanges a chance to freeze assets. Whether any of the three has done so is not yet known.
CoinDCX Says Old 2025 Wallets Moved the Funds, Not a Fresh Breach
Co-founder Sumit Gupta rejected the fresh-breach reading in a post on X. The company says the addresses were created in January 2025, were compromised in the July 2025 attack and have not been used since. It adds that current central and user wallets sent nothing to them.
In a separate post, CoinDCX said user funds are safe and trading continues as normal.
That framing suggests attackers may be moving leftover loot from the earlier case, not draining new funds. It rests on company statements, and independent confirmation has not appeared.
Looking Back: How the July 2025 CoinDCX Hack Cost Nearly $44 Million
The earlier CoinDCX Hack remains the context that makes this week’s alert credible. Per an earlier coverage:
Loss: about $44 million
Source: an internal liquidity account, not customer cold wallets
Response: the company covered the loss from its treasury, isolated systems and paused some Web3 services
What Users Should Know Now: Proof of Reserves and Official Channels
Customers can take a few practical steps while the picture settles:
Follow only official channels: @CoinDCX, @CoinDCX_Cares and @smtgpt
Check wallet addresses through the company’s Proof of Reserves page
Treat unsolicited messages about refunds or recovery as scams
Protect exchange accounts with two-factor authentication
Several questions remain open. Will independent analysts confirm the old-wallet link? Will Binance, OKX or Gate freeze anything? Will CoinDCX publish a fuller incident note?
The CoinDCX Hack story now turns on verification, not volume. If independent tracing ties the October 21 transfers to the 2025 compromise, the episode shows that old wallets stay dangerous long after an incident.
If it does not, the exchange will face pressure to open its books. Either way, the next Proof of Reserves update and any freeze by the receiving exchanges will say more than the first headlines did.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Crypto markets carry significant risk. Always do your own research before making any investment decisions.
