CoinDCX Co-Founder Denies New Hack After $16 Million Wallet Alert

HACK OR EXPLOITCoinDCX Co-Founder DeniesNew Hack After $16 MillionWallet Alert73IMPORTANCEQUIET9NEWS MEDIA14PIECESOct 22, 2026 08:19blockboard.net

Published Updated 13 new reports since it was first published

CoinDCX faced fresh scrutiny after roughly $16 million in USDT and TRX moved from addresses tied to the Indian exchange, prompting competing explanations from the company and blockchain investigators. The exchange said the activity came from addresses compromised in its July 2025 breach, while investigators disputed that account and pressed users to move funds.

What this rests on

Claim by claim, with its source
✓
CoinDCX said the flagged addresses had already been compromised in its July 2025 hack and were not part of its current wallets.
✓
On October 22, CoinDCX said it was looking into the wallet activity after new claims of a second breach surfaced.
✓
On Thursday morning, blockchain investigator Darcy flagged about $16 million moving from addresses suspected to be linked to CoinDCX, and Sumit Gupta told the researcher the attribution was incorrect.
✓
CoinDCX acknowledged an operational loss tied to deposit addresses compromised during its July 2025 incident and said it would absorb that loss.
✓
ZachXBT challenged CoinDCX's explanation and said users should withdraw all funds from the exchange.

What it means

CoinDCX, India's largest crypto exchange, suffered a breach in July 2025 that drained funds from its wallets, one of several incidents that have hit Indian exchanges as trading volumes grew. On-chain sleuths and investigators like ZachXBT have since become a standard check on exchange disclosures, often surfacing wallet movements before companies confirm them publicly.

Users cannot independently verify which wallets are legacy, compromised addresses versus live operational funds, so they are left weighing a company statement against a researcher's on-chain flag. Traders watching the $15.99 million USDT movement must decide whether to treat CoinDCX's assets as secure or pull funds pre-emptively. Gupta's denial, if wrong, would delay withdrawals and recovery far longer than an early admission.

The dispute exposes a recurring trust gap: exchanges control the narrative on their own breaches, while independent investigators control the on-chain evidence, and the two accounts do not always match. When a company says old, compromised wallets explain fresh outflows, it is asking users to trust attribution they cannot audit themselves. That tension, not the dollar figure, is why unresolved wallet disputes damage confidence more than confirmed hacks sometimes do. (per crypto.news)

ZachXBT's challenge to CoinDCX's October 22 statement remains unanswered with on-chain specifics, and the TRON wallet analysis cited in follow-up reporting is the next thing to watch. Whether CoinDCX publishes a transaction-by-transaction reconciliation of the $16 million, or independent researchers produce contradicting proof of fresh compromise, will determine if this closes as a false alarm or reopens as a second breach.

Market reaction

BT Bitcoin market event: it is read against the reference from 2 h before to 4 h after the line marks the first headline
published
-0.56 % before publication
-0.59 % after
$82,190price at publication
12series points

How the story was built

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Oct 22 08:18
+20 min
Oct 22 08:38
BeInCrypto adds
Sharpens the figure: $16M, with quotes
+1 h 10 m
Oct 22 09:27
crypto.news context
Its angle: cryptocurrency, allegations, involving; with quotes
+1 h 16 m
Oct 22 09:34
Crypto Briefing context
Its angle: challenges, confidence, impacting
+2 h 35 m
Oct 22 10:53
Cointelegraph context
Its angle: operations, remained, draw; with quotes
+2 h 41 m
Oct 22 10:59
Coinpedia adds
Brings into the story: LIVE
+2 h 47 m
Oct 22 11:05
Crypto Briefing echo
No new facts: transparency, measures, volatile
+4 h 41 m
Oct 22 12:59
Crypto Economy adds
Sharpens the figure: $15.8M, with quotes
+5 h 26 m
Oct 22 13:44
Coinpedia echo
No new facts: speculation, unconfirmed, triggered; with quotes
+7 h 12 m
Oct 22 15:30
+7 h 14 m
Oct 22 15:32
The Crypto Guardian echo
No new facts: infrastructure, approximately, destinations; with quotes
+9 h 6 m
Oct 22 17:24
Coinpedia echo
No new facts: admitting, founders, withdraw; with quotes
+22 h 33 m
Oct 23 06:50
The Defiant echo
No new facts: acknowledges, disclosed, credited; with quotes
+23 h 44 m
Oct 23 08:02
CoinDesk echo
No new facts: crediting, temporary, interact; with quotes

Thefts of a similar size

WhenWhat happenedFigure
2.6 years ago Curio Ecosystem incident $16M
2.9 years ago FloorProtocol incident $16M
5.0 years ago Indexed Finance · Price manipulation incident $16M
6.2 years ago Electrum incident $16M
7.8 years ago Cryptopia incident $16M

4218 incidents stored · 250 were as large as this one or larger ($16M)