CoinDCX Faces Fresh Security Questions After $16 Million in Suspicious Crypto Outflows
India’s largest cryptocurrency exchange, CoinDCX, has denied suffering a new security breach after blockchain investigators identified approximately $16 million in suspicious cryptocurrency transfers. However, the exchange later acknowledged operational losses linked to previously compromised wallet addresses, raising fresh questions about its security practices.
The controversy emerged on October 21, 2026, when investigators detected significant movements of USDT and TRX tokens. CoinDCX maintains that its active wallets remain secure and that customers have not suffered financial losses.
Blockchain Investigators Flag $16 Million in Transfers
Blockchain investigator Darcy identified suspicious transactions involving approximately 15.99 million USDT and 5,783 TRX on the Tron network. The funds reportedly moved from addresses associated with CoinDCX into a single receiving wallet before spreading across multiple addresses.
The largest individual transaction involved approximately 15.82 million USDT. Investigators subsequently traced portions of the transferred funds to addresses associated with several major cryptocurrency exchanges.
The activity prompted concerns about another potential security breach. CoinDCX previously suffered a cyberattack in July 2025 that resulted in approximately $44 million in losses.
CoinDCX Rejects Hack Allegations but Confirms Losses
CoinDCX CEO Sumit Gupta rejected claims that hackers had compromised the exchange’s current wallets. He explained that the suspicious transactions involved older addresses affected by the July 2025 security incident.
However, blockchain investigator ZachXBT challenged that explanation. He claimed that at least one supposedly discontinued address continued processing deposits months after the previous attack.
CoinDCX subsequently acknowledged that some customers continued sending cryptocurrency to outdated deposit addresses despite warnings. The exchange normally transfers these deposits into secure wallets through an automated process known as sweeping.
According to the company, that process failed temporarily, resulting in operational losses. CoinDCX said it absorbed those losses and credited all affected customer deposits.
Security Questions Remain Despite Customer Assurances
CoinDCX maintains that customer assets remain protected in segregated cold wallets. The company also confirmed that trading operations continue normally and that its active wallet infrastructure remains unaffected.
Nevertheless, investigators continue questioning how previously compromised addresses remained involved in cryptocurrency transfers. The exchange has not publicly disclosed the exact financial impact of its operational failure.
The incident highlights the importance of wallet management and transparent security disclosures across cryptocurrency exchanges. For CoinDCX, restoring confidence will depend on explaining the disputed transactions and demonstrating that its safeguards can prevent similar incidents.
