coindcx

*The $16M Lesson: 'Retired' does NOT mean 'Disconnected'*

The CoinDCX case is scary not because $15.99M was stolen, but HOW it was stolen.

Look at the on-chain data you posted:
- *$15.99M USDT taken from 40 wallets*
- *$15.82M from ONE deposit address alone*
- *5 MINUTES* after CoinDCX's own system moved a customer deposit through that same old address, the thief moved in.
- OKX $5.46M, Other wallets $4.17M, Binance $2.61M, Only $2.21M frozen by Tether.

CoinDCX called them "old addresses". But their own system was STILL sweeping customer deposits through them that same morning!

This is the key point @Susano_Tr made and I agree 100%:

> If money can be sent to these addresses, deposited into the customer's account and then swept into the main wallet via an external service, then these are still part of the exchange's risk. 'Retired' should NOT mean disconnected.

*So, are our funds safe on exchanges?*

Proof of Reserves is not enough. It proves what they HAVE, not what they could LOSE through old infrastructure.

What exchanges should be doing after any wallet migration:

1. *Hard Kill Switch:* Old deposit addresses must be disabled at the smart contract / sweeping level, not just hidden from the UI.
2. *Clear Warnings:* If a user somehow sends to an old address, block it and warn: "This is a retired address".
3. *Balance Alerts:* Real-time alert if any old wallet receives > $1. Never let $15.82M sit in one "retired" address.
4. *Reconciliation Checks:* What customers owe vs what is actually in ALL wallets (including old) must match every hour.
5. *Post-Migration Monitoring:* Monitor old wallets for at least 12 months after migration. Someone else is monitoring them — attackers.

CoinDCX did the right thing saying they absorbed the loss and customer balances were not impacted. But the next exchange might not be able to afford that.

Your funds are as safe as an exchange's *worst old wallet*, not its newest cold wallet.

What do you think — should exchanges be forced to publicly disclose when they retire addresses and how they are disabled?

#CoinDCX

$DCX.US 🚨 COINDCX REPORTS $15.99 MILLION USDT LOSS

Indian crypto exchange CoinDCX has confirmed a loss of 15.99 million USDT linked to old wallet infrastructure affected by a previous security incident.

🔍 What happened?
• An automated service designed to move deposits from retired wallets failed for a period.
• Some deposits accumulated in the old wallet infrastructure.
• CoinDCX says the company absorbed the loss.
• The exchange says customer balances, active wallets and trading systems were unaffected.

🛡️ Why it matters: This incident highlights the importance of wallet security, monitoring legacy systems and communicating transparently when security concerns arise.

📌 These details reflect CoinDCX’s statement; the company’s claims about customer funds have not been independently verified here.

🔗 Official source: https://coindcx.com/blog/coindcx-news/on-chain-wallet-activity-update-21-oct-2026

What security measures should crypto platforms prioritize to protect users? 👇

#CoinDCX #USDT #CryptoSecurity #blockchain #CryptoNews

CoinDCX just confirmed a $15.99M loss, and the details are worse than the headline.

India's largest exchange says attackers drained 15.99M $USDT from deprecated wallets left over from its July 2025 hack. An automated sweeping service failed, so user deposits kept piling up in old, vulnerable addresses until they were emptied on October 21 and routed onward to major exchanges.

The uncomfortable part is the reversal. CEO Sumit Gupta first dismissed the outflow reports as a "false alarm," only to confirm the loss days later after onchain investigators pushed back. The exchange says it absorbed the loss, user funds in segregated cold wallets are safe, and trading was never interrupted.

Oldman view: $16M is survivable for a top exchange, but a second incident on the SAME deprecated infrastructure is an operational failure, not bad luck. Until CoinDCX explains how the wallets were exploited and when the sweeps stopped, trust, not price, is the real damage here.

Risk to watch: the exploit method is still unexplained, and it is unclear whether the same actors from 2025 are involved. This is an exchange security story, not a reason to panic sell the wider market.

📌 Sharing personal opinions only, not financial advice or a recommendation to buy/sell. Crypto is highly risky; DYOR and you are solely responsible. No coin promotion.

#CoinDCX #CryptoSecurity #CryptoExchange #Binance

⚠️ COINDCX CONFIRMS A $16M LOSS DAYS AFTER CALLING IT A "FALSE ALARM"

The Indian exchange now admits it:
→ User deposits piled up in old wallets that were retired after its $44M hack in July 2025
→ An automated fund-sweeping system failed, and about $15.99M in USDT was drained from TRON deposit addresses
→ Losses from the two incidents now total nearly $60M

CoinDCX says it will cover the loss and that user funds are safe. Onchain investigator ZachXBT, who challenged the first denials, is urging customers to withdraw.

Lesson for every platform: "retired" wallets are still wallets. If keys were compromised once, they stay compromised.

How much of your crypto do you keep on exchanges right now? 👇

#CoinDCX #CryptoSecurity #Hack #CryptoNews

🚨 CoinDCX Confirms $15.99 Million USDT Loss! 😱

India’s Crypto Exchange Reveals A $15.99 Million Loss After An Automated Wallet-Sweeping Failure In Previously Compromised Wallet Infrastructure. CoinDCX Says Customer Balances And Active Trading Systems Remain Unaffected. 💰🔐

#CoinDCX #cryptoindia #BreakingNews @Binance South Asia @Binance News @Binance Square Official $NVDAB

A “false alarm” that became a $16 million loss? That makes me uneasy. 😬

CoinDCX, India’s largest crypto exchange, initially dismissed reports of suspicious outflows. Now it says an internal process failure tied to a retired wallet caused a $16 million loss—and the exchange will absorb it.

I’m relieved it’s taking the hit, but that reversal deserves scrutiny. 🔍

What matters more to your trust: absorbing the loss or explaining exactly how the failure happened?

#Crypto #CoinDCX #ExchangeSecurity

CoinDCX, India's largest crypto exchange, absorbed a 6 million loss after an internal sweeping process failed to move customer deposits from a retired wallet.\n\nThe wallet was deprecated following a July 2025 security incident, but users kept depositing to it. The broken sweep process left 5.99M USDT stuck, which the exchange covered.\n\nCoinDCX says all user funds remain safe in segregated cold wallets. What's your take on exchange operational risks?\n\n#CoinDCX #CryptoSecurity

🚨 BREAKING: CoinDCX Admits to $16M Loss 🚨
Indian cryptocurrency exchange CoinDCX has officially confirmed a massive $15.99 million loss.
What makes this surprising? Just a few days ago, the exchange firmly denied rumors that its platform had been compromised by a hack. Now, they have stepped forward to admit the multimillion-dollar hit.
Key Takeaways for Traders:
🔹 The Flip-Flop: The team initially called the hack rumors false before officially admitting the loss.
🔹 The Impact: Nearly $16 million is gone.
🔹 The Lesson: This is a major reminder that exchange security is never guaranteed. Always stay updated and manage your risks carefully! 🛡️
What are your thoughts on this sudden U-turn by the exchange? Drop your thoughts in the comments! 👇
#CoinDCX #BinancePick #BİNANCESQUARE #Binace #crypto
$BTC $BNB

🚨 CRYPTO SECURITY ALERT: REPORTED $16M LOSS AT COINDCX! 🔐

A new report says Indian crypto exchange CoinDCX confirmed a loss of approximately $16 million involving retired wallets. The incident highlights why wallet management and security controls matter—even after addresses are no longer actively used.

🔎 3 important lessons for every crypto user:

🔐 Review wallet security: Retired addresses and old infrastructure still need proper controls.

🛡️ Verify the facts: Follow official exchange statements and avoid spreading unconfirmed claims.

⚠️ Protect yourself: Never share your seed phrase, private keys, or one-time passwords with anyone.

💬 Question for the community: Do you think crypto platforms should publish regular independent security audits? Why or why not?

🔔 Follow CryptoWithSahil for daily crypto news, market insights, and blockchain updates!

#CoinDCX #CryptoSecurity #blockchain #CryptoNews #Web3

CoinDCX has now put a number on its TRON outflow: 15.99M USDT, lost from an old wallet it had called retired. Tether froze 2.21M of it. That is 13.8%.

On Oct 21 at 23:35 UTC+8, the old address TQKJQ sent 15,819,002 USDT in one transfer to a new wallet, which also took about 172,000 USDT from 39 smaller addresses. By 11:22 UTC+8 on Oct 22 that wallet had sent everything on to six addresses.

Tether blacklisted nine linked addresses at 06:45 UTC+8 on Oct 23, about 19 hours after the first wallet was empty. Those nine hold 2,212,850 USDT. By our math, about 13.78M, or 86.2%, had already moved on.

In a blog post on Oct 25, CoinDCX said the loss hit "old, deprecated wallet infrastructure which had unknown vulnerabilities", that its sweeping service had failed for a period, and that it absorbed the loss. It says customer balances are fully accounted for.

On-chain records read by CryptoWatchDesk show the same old address forwarding USDT as late as May 2026.

A freeze only catches what is still sitting still. Only deposit to the address your exchange app shows you today, never to one saved from before.

$USDT
#CoinDCX #Tether
NFA. DYOR.

🔴 CoinDCX Confirms $16M Loss From Its "Retired" Wallets

India's largest crypto exchange has finally put a number on it: $15.99M in $USDT drained on October 21 from legacy wallet infrastructure it says was retired after its July 2025 hack.

Why this admission matters: CoinDCX first denied a new breach. On-chain investigators led by ZachXBT then showed the "retired" address had still been sweeping user deposits as recently as May 2026. Only now, in a blog post shared Sunday, has the exchange confirmed the exact loss, saying it absorbed the cost and that customer deposits were credited and trading was unaffected.

The lesson for every exchange user is blunt: on a key-based chain, a "retired" wallet is not switched off. The key still works. If the sweep fails, funds pile up exactly where attackers already know to look.

⚠️ Honest risk: CoinDCX insists user funds are safe, but independent investigators dispute its account and no forensic report has been published. Until one appears, treat any "legacy wallet" explanation as unverified.

🔑 for self-custody, 🏦 for exchange trust. Which side are you on?

📌 Sharing personal opinions only, not financial advice or a recommendation to buy/sell. Crypto is highly risky; DYOR and you are solely responsible. No coin promotion.

#CoinDCX #CryptoSecurity #Crypto #Binance

$16 million in flagged outflows—and a denial. That makes me pause. 😬

Blockchain sleuths flagged suspicious outflows from addresses linked to CoinDCX, India’s largest exchange. CoinDCX denies its active wallets were hacked.

The distinction matters: suspicious transfers aren’t proof of a hack, but a denial alone doesn’t explain the movements. 🔍

I’d want a clear explanation before drawing conclusions. What would reassure you more: a wallet-by-wallet breakdown or an independent review?

#CoinDCX #CryptoSecurity #Blockchain

🚨 $16M $USDT Outflow: A Crypto Security Wake-Up Call?

Around $16M in USDT moved from wallets linked to CoinDCX, raising questions about wallet security and transaction monitoring.

CoinDCX says the issue involved old wallets and that customer funds remain safe.

How do you view this incident—as a warning for exchanges or a reminder to improve wallet management?

What's your view? Share your thoughts in the comments below. 👇

#CryptoSecurity #USDT #CoinDCX #Blockchain #CryptoNews

🚨 $COINDCX DENIES NEW BREACH, RECALLS JULY 2025 COMPROMISED WALLETS! 📊

📌 CoinDCX’s statement draws a clear line between historic wallet compromise and today’s on‑chain chatter. The compromised addresses, first hit in July 2025, continue to move assets, but the exchange stresses no fresh intrusion into its platform. 🦈 This distinction helps dampen panic‑driven sell pressure that often follows ambiguous blockchain spikes.

🔍 Traders should watch for any liquidity sweeps triggered by these legacy wallets, yet the core risk remains confined to the original breach vector. Maintaining 2FA and regular account audits stays prudent. 💡 How are you adjusting your security posture in light of this clarification? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #COINDCX #Security #Exchange #Crypto

🔥 💎

I learned the term “retired wallet” today.

CoinDCX, India’s largest exchange. On October 21, about 15.99 million U flowed out of a batch of old deposit addresses on TRON. The first reaction was: it wasn’t a hack—these were old wallets left over from the July 2025 theft (about 44 million), and they hadn’t been used in ages.

Then ZachXBT checked the on-chain activity: one of those “old” addresses was still sweeping deposits into their hot wallet as recently as May 2026.

Once an address has been compromised, you should assume its private key is no longer yours. But nearly a year later, it was still receiving users’ funds and going through the sweeping process. You call that retired? That’s just nobody keeping an eye on it.

Later, the story changed: an automated sweeping service had malfunctioned, so funds kept piling up in the old addresses. The platform would absorb the loss, and users’ balances would remain unaffected. Tether froze about 2.2 million—just over 13%. According to on-chain posts, the rest had already been split up and sent to OKX, Binance, and Gate.

Credit where it’s due for covering the loss themselves. But the sequence says a lot: deny it first, get called out by on-chain evidence, then share the numbers. “It’s not a new vulnerability” translates to “we never fixed the old one.” That doesn’t make it sound better; it makes it look worse.

There’s just one thing retail users can do: don’t save exchange deposit addresses in your address book and reuse them. Copy the address again from the app before each deposit. You don’t know whether anyone is still monitoring the address you saved. Sometimes, they don’t know either.

#CoinDCX

CoinDCX confirmed losses its CEO had downplayed.

The Mumbai-based exchange reported that 15.99 million USDT had been drained from wallets it had taken offline after last year's $44 million hack.

The combined losses from both incidents are now approaching $60 million.

What's striking: the CEO had called it a false alarm just days earlier.

Now the platform is absorbing the impact itself.

What stands out more to you: the amount or the change in story?

$BTC #CoinDCX #Crypto

India's exchange CoinDCX has confirmed a loss of about 15.99 million USDT. The issue points to a security vulnerability in an old wallet, allowing the attacker to transfer assets. This once again shows: coins kept on a platform do not mean you control the private keys yourself; historical wallets, approval processes, and cold/hot wallet segregation must be reviewed regularly.

Going forward, the focus should be on the progress of deposit and withdrawal restoration, explanations of user asset protection, and on-chain fund tracing. What ordinary users can do is avoid over-reliance on a single custodian, enable withdrawal whitelists, and move long-term assets back to a self-custody wallet. Security incidents are often not about "whether they happen," but about "when they are exposed."#CoinDCX #crypto security

India-based crypto exchange CoinDCX confirmed a loss of approximately 15.99 million $USDT due to a vulnerability in an old wallet. The key issue was not “how sophisticated the new attack was,” but the failure of the fundamentals: legacy wallets and key management. For exchanges, deposit and withdrawal segregation, hot- and cold-wallet tiers, vulnerability disclosure, and on-chain tracking must all work in sync. For users, spreading large holdings across multiple wallets, regularly revoking authorizations, and enabling withdrawal whitelists remain essential steps to reduce counterparty risk. Security incidents often don’t happen out of nowhere—they’re old liabilities being triggered. #CoinDCX #加密安全 #USDT

India's crypto exchange CoinDCX confirmed a loss of about 15.99 million $USDT due to a vulnerability in an old wallet. The issue was not just a single abnormal transfer; rather, a historical wallet architecture was found to contain exploitable risks. This reminds all platforms that asset migration should not only move balances, but also promptly revoke old permissions, rotate keys, and revalidate cold-hot segregation and multisignature strategies.

For ordinary users, large assets should be self-custodied first, with exchanges holding only short-term trading funds. When a platform security incident occurs, first pay attention to the official deposit and withdrawal status, wallet explanations, and compensation policy; do not trust airdrop links or “customer service” that comes to you proactively. Security is not a one-time audit, but continuous checks for historical baggage.

#交易所安全 #加密钱包 #CoinDCX