CoinDCX Denies New Breach After $16 Million in Wallet Transfers

Indian crypto exchange CoinDCX denied a new security breach after about $16 million in crypto moved from addresses linked to the company, renewing scrutiny of deposits sent to wallets it had retired.

The transfers included about 15.99 million Tether (USDT) and 5,783.81 TRON (TRX). The assets moved to an address on the TRON network before being split among other wallets. The activity was flagged at 11:35:54 a.m. ET (15:35:54 UTC) Oct. 21.

CoinDCX dated the addresses to January 2025 and said a July 2025 compromise led it to retire them. Warnings did not stop some users from sending funds there, and the exchange acknowledged that its collection process broke down temporarily. CoinDCX said it credited every affected deposit and kept customer holdings in separate cold wallets. It did not disclose its operational losses.

Blockchain investigator ZachXBT challenged that timeline, saying a customer deposit address was still active in April and May 2026; he also alleged that $15.8 million in deposits were unaccounted for. CoinDCX maintained that its active operating wallets and customer wallets were unaffected. The exchange had separately disclosed that a partner venue’s hot wallet used to support liquidity was compromised in July 2025.