# CoinDCX Says Retired Wallet Breach Cost It $15.99 Million

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/40760
Published: 2026-10-26T02:57:17.000Z
Updated: 2026-10-26T02:57:17.000Z
Section: Technology

> CEO Sumit Gupta had called breach reports a false alarm three days earlier. CoinDCX said customer funds remained in segregated cold wallets.

CoinDCX said Oct. 25 that an attacker took $15.99 million from deposits left in a wallet the Indian exchange had retired, with the company absorbing the loss.

CoinDCX said the incident affected retired wallet infrastructure with an unknown vulnerability. An automated process that moved funds between wallets failed for a period, allowing deposits to build up at addresses the exchange no longer used. The resulting loss was 15.99 million USDT, which CoinDCX valued at about $16 million and said it would cover.

On Oct. 22, co-founder and CEO Sumit Gupta said the wallet had not been hacked and described the reports as “a false alarm.” CoinDCX later acknowledged an operating loss tied to deposits that continued reaching inactive addresses.

The exchange said customer funds are held in segregated cold wallets and that trading, deposits and withdrawals remained operational. CoinDCX said it would increase monitoring of leftover systems and issue regular reminders for customers to update deposit addresses.

CoinDCX was hit by a separate $44 million hack in July 2025; Gupta said at the time that the company would absorb that loss.