CoinDCX Hack Update: Why No Refund Is Needed After $16M Loss
CoinDCX Security News: Wallet Upgrades, Phishing Warnings, and Refunds
The latest CoinDCX hack update comes with a clear answer on money. The exchange absorbed the full loss of about $16 million, or 15.99 million USDT, and says no customer needs a refund.
Source: CEO Sumit Gupta Official Post
The funds left old wallet infrastructure on or around 21 October 2026. The Indian exchange says it paid the entire loss from its own reserves and that no customer lost money.
For crypto hack news, that is the headline. The cause is a quieter story about aging deposit addresses and a sweeping tool that stopped working.
CoinDCX Hack Update: How Old Deposit Addresses Led to a $16M Drain
Key facts from the CoinDCX security incident, based on official updates and incident reports:
Loss: about $16 million (15.99 million USDT)
Timing: on or around 21 October 2026
Source of funds: deprecated deposit addresses tied to the July 2025 breach
Customer impact: none, according to the exchange
Not compromised: active wallets and segregated cold wallets
CoinDCX’s official note, on October 28, said it is strengthening its wallet management systems and backend infrastructure following the incident. The exchange confirmed that deposits, withdrawals, and trading continue to operate normally, while any required maintenance will be announced through its app or website.
How Old Deposit Addresses Led to the Drain and the Sweeping Failure
The CoinDCX security incident traces back to retired deposit addresses tied to the July 2025 breach. Some users kept sending funds to them, and the exchange still credited those deposits to their accounts.
An automated sweep was meant to shift the money into active primary wallets. It failed for a period, so the funds sat in the weaker legacy setup until attackers emptied it.
On-chain analysts have asked why those addresses stayed live for so long. The exchange has not answered that question in full.
Why Customers Need No Refund Claim After the Exchange Covered the Loss
The latest CoinDCX update says affected deposits were credited to user accounts. The exchange covered the gap itself, which is why it has not opened a reimbursement form.
CEO Sumit Gupta also admitted that calling the incident a false alarm too early was his mistake.
The latest CoinDCX hack update includes practical steps for customers:
Suspect a problem? Contact support through the app, the website or @CoinDCX_Cares, with transaction details.
Depositing? Copy the current address from the app or website every time, and never reuse one from old history.
Received an unexpected email? Treat it as phishing. The exchange has issued a warning.
Maintenance? Short windows may follow, announced only on the official app and website.
The crypto exchange says backend work is under way to tighten how wallets and infrastructure are managed, mostly out of sight. Similar security gaps matter across the industry, and this crypto exchange hack 2026 case shows how a forgotten address can become the weak link.
The next test is transparency. A clear account of why the old addresses stayed active, and proof that the sweeping system now has safeguards, would do more to rebuild trust than any assurance. Until then, every CoinDCX hack update will be judged on details rather than promises.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Crypto markets carry significant risk. Always do your own research before making any investment decisions.
