CoinDCX Absorbs Losses After Failed Sweep of Compromised Deposit Addresses

AI disclosure: drafted by Basis Desk's AI newsroom and machine-checked against the primary sources listed below — how we use AI. Originally published on Basis Desk.

The Indian exchange credited users affected by a failed sweep mechanism following a disputed $15.8 million Tron transfer.

Key points

• CoinDCX absorbed operational losses after an automated mechanism failed to sweep deposits sent to addresses deprecated after a July 2025 hack.
• On-chain data showed 15.8M USDT moved out of a flagged Tron deposit address on Oct. 21 to an unidentified external wallet.
• Co-founder Sumit Gupta pledged that customer funds would be protected, while the exchange warned it may not cover future retired address deposits.

Indian cryptocurrency exchange CoinDCX said on Oct. 22 that it absorbed operational losses after its automated sweeping mechanism failed to collect customer deposits sent to deprecated wallet addresses [1]. The platform credited impacted customer accounts, following an internal breach in July 2025 where attackers took roughly $44 million from an internal wallet [1].

According to CoinDCX, users were instructed to stop sending funds to addresses compromised during the 2025 incident [1]. To protect mistaken inflows, the firm ran a routine sweep process to move incoming funds into secure storage [1]. The platform stated on Thursday morning India time that this sweep failed for an unspecified window, creating operational losses that the company opted to cover [1]. CoinDCX has previously faced community scrutiny and denied a fresh hack following $16M outflow from retired addresses [1].

Disputed On-Chain Movements

The admission follows on-chain scrutiny on Oct. 21, when Tron records showed an address ending in TQKJQ transferred 15,819,002 $USDT to an unknown wallet created hours earlier [1]. CoinDCX co-founder Sumit Gupta initially dismissed reports of a new security incident, calling it a false alarm and claiming the addresses had not been operated by the platform since the 2025 breach [1].

However, independent on-chain investigator ZachXBT alleged that the address had routed user deposits to CoinDCX's active hot wallet as late as May 2026, alleging that roughly $15.8 million in customer deposits had been left unaccounted for [1]. Gupta subsequently said the company was investigating the activity, pledging that users would not lose funds [1]. CoinDCX maintained that its primary cold reserves were unaffected, while warning that it generally does not assume liability for transactions sent to obsolete deposit destinations [1].

Sources

1. CoinDCX Absorbs Losses, Credits Users After Failed Sweep of Hacked Deposit Addresses — Primary document (discovered)

Basis Desk is a source-verified crypto newsroom. Market data, a free MCP server for AI agents and JSON APIs: basisdesk.news/developers. Not investment advice.