CoinDCX confirms $16M loss from retired wallets after breach reports

CoinDCX has confirmed a loss of roughly $16 million after attackers drained deposit wallets the exchange thought it had put out to pasture. The company says it absorbed the hit itself. The retired wallets were left over from the exchange’s 2025 hack. Wallets meant to be part of the cleanup ended up becoming a second chapter of the problem. What went wrong at CoinDCX The research findings put the outflow at approximately 15.99 million USDT, along with 5,784 TRX. The funds moved from 40 TRON addresses into a newly created address. CoinDCX reported the loss on October 21, 2026. India’s largest crypto exchange described the damage as an operational loss rather than a hit to customer balances. The culprit, according to the exchange, was its automated sweeping service. That system moves funds between CoinDCX’s own wallets, pulling deposits out of old addresses and into active ones. CoinDCX said the service “had failed for a particular period.” During that window, user deposits kept arriving at an address the exchange was no longer using. Users made whole, questions remain The exchange says it credited affected users from internal reserves. It also said trading operations were not disrupt...