CoinDCX said it absorbed a $15.99 million loss after a service failed to move customer deposits out of a retired wallet compromised in a 2025 security breach. The exchange initially dismissed reports of suspicious outflows but later acknowledged that users had continued sending funds to the deprecated addresses. All user funds remain safe in secure, segregated cold wallets.
Markets India’s largest crypto exchange absorbs $16 million loss from internal process failure tied to retired wallet The Mumbai-based exchange initially dismissed reports of suspicious outflows as a false alarm. It now says it lost $16 million and will absorb the loss. By Omkar Godbole Updated Oct 26, 2026, 1:49 a.m. EDT Published Oct 26, 2026, 1:39 a.m. EDT 2 min read Make preferred on Share Share this article Copy link X icon X (Twitter) LinkedIn Facebook Email Make preferred on India’s largest exchange absorbs $16 million loss. (CoinDesk Archive) Summary Show CoinDCX said it absorbed a $15.99 million loss after a service failed to move customer deposits from a retired wallet compromised in a 2025 security breach. The exchange initially dismissed reports of suspicious outflows but later acknowledged that users had continued sending funds to the deprecated addresses. CoinDCX said customers’ balances, active wallets and trading systems were unaffected, though it conceded that it could have disclosed the incident more quickly. CoinDCX, India’s largest crypto exchange by trading volumes, says it has absorbed a $16 million loss after an internal process failed to move customer deposits out of a retired wallet. It all started last week, when blockchain sleuths flagged about $16 million in suspicious outflows from wallets linked to the Mumbai-based exchange. CoinDCX was quick to dismiss the reports, with CEO Sumit Gupta calling it a false alarm on X. A spokesperson told CoinDesk that the addresses cited by the sleuths were old ones, created in January 2025 and compromised in the July 2025 hack, which cost the exchange about $44 million, and that CoinDCX had not used them since. In essence, the exchange said the activity did not have any connection with CoinDCX. But ZachXBT, a well-known on-chain investigator, said at least one of those addresses, labeled TQKJQ, was in use by a liquidity provider and swept user deposits to CoinDCX’s current public hot wallet as recently as April and May 2026. On Sunday, CoinDCX published a blog post on the activity tied to TQKJQ, saying the wallet belongs to its old operational wallet infrastructure and that the loss was tied to it. “This wallet belongs to our old operational wallet infrastructure, which was compromised during the security incident we reported on July 19, 2025, and was deprecated as a result,” CoinDCX said. The post explained that some users mistakenly continued to deposit funds into the deprecated, or retired, addresses even after the exchange deprecated them following the 2025 hack. CoinDCX credited those users’ portfolios the moment the funds reached the deprecated wallet. A secondary service, which the exchange calls sweeping, was meant to then move the funds from the deprecated address into the primary CoinDCX wallet. However, that process failed for a particular period, causing deposits to accumulate in the deprecated address. “This led to a loss of 15.99 million USDT which was absorbed by the company,” it said. The blog post does not call it a hack and does not say who was behind the irregular fund movement or how it happened. CoinDesk has reached out to CoinDCX to ask whether it means the old, retired addresses were hacked again. “We want to reiterate that all user funds remain safe in secure, segregated cold wallets, protected by multi-layer custody and offline security controls,” the exchange said. Cold wallets are kept offline by design. Newsletters Crypto Daybook Americas - The latest moves in crypto markets, in context Market analysis for crypto traders and investors. Preview Sign up By signing up, you will receive emails about CoinDesk products and you agree to our terms & conditions and privacy policy . “It took us some time to do the thorough review of the deprecated infrastructure and confirm the sequence of events. We could have been more proactive, but we shared this update as soon as we had the complete picture,” it added. India Latest Crypto News 1 Bitcoin wallet bug let rogue servers steal funds when users tried to speed up payments 38 minutes ago 2 Bitcoin slips under $80,000 as traders de-risk ahead of Fed meeting 1 hour ago 3 Elon Musk issues a warning for ‘AI neoclouds’ as SpaceX borrows $40 billion for chips 2 hours ago 4 Latvia targets tokenization rules in 2027 with commercial property in focus 14 hours ago 5 UK banks face 10,000 complaints in 3 months over crypto restrictions 16 hours ago 6 Strategy, Strive face balancing act between bitcoin buying and preferred stock dividends 1 day ago 7 Block’s new voice AI sounds eerily human, sparking awe and scam fears 1 day ago 8 Crypto under weekend pressure, bitcoin slides below $80,000 on U.S. Middle East evacuations 1 day ago 9 Why McDonalds, Microsoft and Google saying no to tokenized stocks isn’t a dealbreaker 1 day ago 10 Argentina drops criminal probe into President Milei over crashed memecoin LIBRA 1 day ago Latest Research Beyond the Risk-Free Rate: Diversified Real World Yield in Productive Stablecoins Beyond the Risk-Free Rate: Diversified Real World Yield in Productive Stablecoins Diversified RWA stablecoins sustain 5-7% yield from real credit as crypto funding compresses to ~4%. GENIUS pushes yield off-chain; TAM grows to $4B in 3 years. By CoinDesk Research Sep 24, 2026 Commissioned by RealFi Diversified RWA stablecoins sustain 5-7% yield from real credit as crypto funding compresses to ~4%. GENIUS pushes yield off-chain; TAM grows to $4B in 3 years. Why it matters : Diversified RWA stablecoins sustain 5-7% yield from real credit as crypto funding compresses to ~4%. GENIUS pushes yield off-chain; TAM grows to $4B in 3 years. View Full Report More From Markets Bitcoin slips under $80,000 as traders de-risk ahead of Fed meeting Elon Musk issues a warning for ‘AI neoclouds’ as SpaceX borrows $40 billion for chips Crypto under weekend pressure, bitcoin slides below $80,000 on U.S. Middle East evacuations