CoinDCX Confirms $16 Million Loss from Retired Wallets, Total Hacks Near $60 Million

Indian cryptocurrency exchange CoinDCX has confirmed a significant $15.99 million loss stemming from an attack on its wallet infrastructure. This admission on Tuesday, October 27, 2026, marks a reversal from earlier assurances by co-founder Sumit Gupta, who initially dismissed reports of a breach as a "false alarm." The incident underscores persistent security challenges within the digital asset sector, particularly for major platforms in emerging markets.

The confirmed loss, which CoinDCX stated it has absorbed to protect customer funds, adds to a previous $44 million hack in July 2025. Cumulatively, these two security breaches now account for nearly $60 million in losses for one of India's largest crypto exchanges, raising questions about its long-term resilience and operational security.

CoinDCX India Legal Status Under Scrutiny After $16 Million Loss

The recent incident involved $15.99 million in USDT, a stablecoin pegged to the US dollar, which was drained from wallets on the Tron network on October 21. CoinDCX traced the breach to a failure in an internal process designed to sweep, or automatically transfer, customer deposits out of wallets that had been retired following the more substantial 2025 attack. These legacy addresses, though no longer actively used, continued to receive residual deposits, leaving funds exposed when the automated transfer system failed.

Initial reports of suspicious outflows from blockchain researchers and the Arkham tracker were met with strong denials. CEO Sumit Gupta publicly stated on X that CoinDCX's wallets were "not breached," attributing the flagged activity to addresses compromised in July 2025. However, on-chain investigator ZachXBT disputed this account, highlighting that the wallet in question had continued sweeping user deposits into CoinDCX's active hot wallet as recently as April and May, prompting him to urge customers to withdraw their assets.

The discrepancy between initial public statements and the eventual disclosure has drawn criticism regarding transparency. For an exchange operating in a market where the CoinDCX India legal framework for cryptocurrencies is still evolving, such incidents can erode user trust and invite further regulatory scrutiny. Questions about whether CoinDCX India is legal or illegal often arise in the context of such security lapses, even though the exchange operates within the existing, albeit ambiguous, Indian regulatory landscape.

A Pattern of Security Lapses and Denials

This latest breach is not an isolated event but rather a continuation of a tumultuous period for CoinDCX. The exchange suffered a significant $44 million hack in July 2025, which it attributed to a server breach. That incident led to a public bounty hunt for the stolen funds and, subsequently, the arrest of an employee in connection with the theft. The retired wallets at the core of the current $16 million loss were a direct legacy of this earlier compromise, intended to be decommissioned but failing to be fully cleared.

Such repeated security incidents highlight the inherent risks in managing digital assets, even for established platforms. The crypto industry grapples with sophisticated cyber threats, and robust internal controls are paramount. As we reported in "CoinDCX Denies Hack After On-Chain Sleuths Flag $16 Million in Suspicious Outflows" at the time of the initial reports, the immediate denials followed by confirmation underscore a communication challenge that can exacerbate user anxiety.

Beyond hacks, CoinDCX has faced other operational challenges this year. The exchange contended with allegations of fraud and impersonation scams, which triggered a police probe. Concurrently, its founder denied reports of acquisition talks with Coinbase in the aftermath of the 2025 hack, even as Coinbase has actively sought to expand its presence across South Asia and the Middle East.

How Crypto Exchanges Manage Risk and User Funds

Cryptocurrency exchanges typically employ a combination of hot and cold wallets to manage user funds and mitigate risk. Hot wallets are online and used for daily transactions, offering high liquidity but also greater exposure to online threats. Cold wallets, conversely, are offline storage solutions, providing superior security for the vast majority of assets by insulating them from internet-based attacks. The challenge lies in the secure transfer of funds between these systems and the proper decommissioning of old infrastructure.

The failure of an automated transfer system to sweep funds from retired wallets suggests a lapse in CoinDCX's internal asset management protocols. While CoinDCX has stated it absorbed the loss and customer funds are safe, the incident raises questions about the robustness of their cybersecurity framework and the efficacy of their post-breach recovery procedures. For ordinary investors, understanding these mechanisms is crucial to assessing the safety of their digital assets.

In the broader market, the news has had minimal immediate impact on major cryptocurrencies. Bitcoin is trading at $79,713.90, down slightly by 0.37%, while Ether stands at $2,310.43, a 0.42% decrease. These minor fluctuations suggest that while individual exchange security incidents are concerning for their users, the broader crypto market has matured to a point where localized breaches do not necessarily trigger systemic downturns, unless they are exceptionally large or impact a globally critical infrastructure provider.

Implications for Nigerian and African Crypto Users

For cryptocurrency users in Nigeria and across Africa, where digital asset adoption is growing rapidly, incidents like the CoinDCX hack serve as a critical reminder of the importance of due diligence. While CoinDCX primarily serves the Indian market, the principles of secure exchange operation are universal. Users should prioritize exchanges with strong security track records, transparent communication, and robust insurance policies or guarantees for customer funds. The repeated nature of the CoinDCX incidents highlights that even established platforms can face significant challenges.

Investors are encouraged to diversify their holdings across multiple platforms and, where possible, utilize personal cold storage solutions, such as hardware wallets, for significant amounts of cryptocurrency. As we've covered in articles like "Ledger Confirms Hardware Implant in Resold Device Amid $86M Loss Estimate", even hardware wallets require careful handling, but they generally offer a higher degree of control over one's private keys than leaving funds on an exchange.

The incident also underscores the need for clear regulatory frameworks in emerging crypto markets. While India's stance on crypto has been evolving, a definitive legal and operational structure could help enforce higher security standards and accountability for exchanges, benefiting users in the long run. African regulators are similarly grappling with how to best supervise this rapidly expanding sector.

What to watch

• CoinDCX's ongoing investigation: The exchange has pledged to share further details as its internal investigation continues.
• Regulatory response in India: The repeated security breaches could prompt Indian financial authorities to intensify scrutiny or accelerate the development of clearer cryptocurrency regulations.
• User withdrawals: Monitor any significant shifts in user asset withdrawals from CoinDCX, which could indicate a loss of confidence despite assurances of customer fund safety.
• Industry security standards: Watch for any broader industry initiatives or technological advancements aimed at preventing similar incidents with retired or legacy wallet infrastructure.

Frequently asked questions

Is CoinDCX India legal?

CoinDCX operates legally within India's current regulatory landscape for cryptocurrencies. While India's crypto regulations are still evolving, CoinDCX is one of the country's largest exchanges, adhering to existing guidelines and reporting requirements. The recent security incident does not inherently change its legal status but may invite increased regulatory attention.

What is the latest CoinDCX India news?

The latest CoinDCX India news confirms the exchange lost $15.99 million in USDT from an attack on retired wallets on October 21, 2026. This admission reverses earlier denials by its CEO and brings the exchange's total losses from hacks to nearly $60 million since July 2025. CoinDCX stated it has absorbed the loss, and customer funds remain safe.

Was CoinDCX hacked in 2025?

Yes, CoinDCX suffered a significant $44 million hack in July 2025, which the exchange attributed to a server breach. This earlier incident prompted a bounty hunt for the stolen funds and led to the arrest of an employee. The wallets involved in the recent $15.99 million loss were legacy infrastructure from this 2025 breach.

Are customer funds safe on CoinDCX?

CoinDCX has stated that customer funds remain safe and unaffected by the recent $15.99 million loss. The exchange has confirmed it absorbed the financial hit itself. However, repeated security incidents can raise concerns among users, prompting some to consider withdrawing assets or diversifying their holdings across multiple platforms and personal cold storage solutions.