Reports circulating this week alleged that CoinDCX, one of India’s largest cryptocurrency exchanges, may have suffered a hack resulting in losses of roughly $16 million. The claims drew immediate attention given the exchange’s size and its prior history with security incidents.
CoinDCX quickly pushed back on the reports. The company said the wallet activity cited in the claims does not represent a new breach. Instead, it attributed the flagged transactions to its 2025 security incident, suggesting the funds movement reflects aftermath activity rather than a fresh compromise.
The explanation has not settled the matter. Blockchain investigator ZachXBT, known for tracking suspicious on-chain activity across the crypto industry, questioned CoinDCX’s account. ZachXBT’s scrutiny has added uncertainty to an already murky situation, with the exchange and outside observers offering different interpretations of the same wallet data.
The discrepancy underscores a recurring challenge in crypto security reporting. On-chain data can show wallet movements and fund transfers, but interpreting the cause behind that activity often requires context only the exchange itself holds. When an exchange’s account of events conflicts with outside analysis, users and markets are left to weigh competing narratives without a clear resolution.
CoinDCX’s 2025 breach, referenced in the company’s denial, previously exposed the exchange to scrutiny over its custody and security practices. Any renewed hack claims, even if unconfirmed, tend to reignite concerns about exchange-level risk management across the industry. Indian regulators and users alike have grown more attentive to exchange security following a string of incidents at platforms worldwide in recent years.
For now, the core facts remain contested. Reports point to a possible $16 million loss. CoinDCX maintains no new hack occurred. ZachXBT’s questions suggest the wallet activity deserves further independent examination before either account can be treated as settled. The situation illustrates how quickly narratives can diverge when on-chain data is open to multiple readings.
CoinDCX has not yet provided a detailed technical breakdown addressing ZachXBT’s specific concerns, based on available reporting. Until further clarification emerges, the exchange’s denial and the hack claims exist side by side, unresolved.
Sources disagree on this story
This article was published before the reports below were compared. The reporting above stands; what follows is where the published accounts do not agree.
Coinfomania reports CoinDCX may have suffered a new $16 million hack, while crypto.news reports CoinDCX's denial and attribution of the funds to its 2025 breach.
What all sources agree on
- On October 21, approximately 15.99 million USDT and roughly 5,784 TRX moved from wallets identified as CoinDCX addresses to a TRON address.
- The funds were allegedly routed through intermediary wallets to deposit addresses at exchanges including Binance, OKX and Gate.
- CoinDCX previously suffered a $44 million security breach in July 2025.
- The allegations originated from on-chain investigator Darcy.
Where the reports disagree
1Whether the October 21 transfer represents a new hack
CoinDCX may have suffered a $16 million hack, raising security concerns.
Indian cryptocurrency exchange CoinDCX has denied allegations of a new security breach involving nearly $16 million in cryptocurrency transfers
What would settle it: CoinDCX's completed investigation and reconciliation of wallet ownership and transaction history, independently verifiable on-chain.
2Origin and current status of the implicated wallet addresses
On October 21, around 15.99 million USDT and 5,784 TRX were allegedly transferred from CoinDCX's hot wallets to a single TRON address.
the transactions involved wallet addresses created in January 2025 and compromised during its July 2025 security incident.
What would settle it: CoinDCX's wallet infrastructure records and on-chain history of the specific addresses, cross-checked against blockchain investigators' data.
What to make of it
Treat the on-chain movement of roughly $16 million in USDT and TRX on October 21 as established, but treat the characterization of this as a 'new hack' versus a reuse of addresses from the 2025 breach as unresolved pending CoinDCX's completed investigation.
Market Impact
Unverified hack claims involving a major exchange can weigh on user confidence even before facts are confirmed. CoinDCX's user base and trading volumes may face short-term scrutiny as the dispute over the wallet activity plays out.
The episode also feeds into broader market sensitivity around exchange security, particularly for platforms with prior breach history. Traders and institutional partners often treat renewed security questions cautiously, regardless of whether the underlying claims are ultimately substantiated.
The dispute between CoinDCX and outside observers over the $16 million wallet activity remains unresolved. Further on-chain analysis or an official statement from the exchange may be needed to clarify whether the funds movement reflects a new incident or lingering effects of the 2025 breach.
Frequently Asked Questions
What exactly is CoinDCX accused of in these reports?
Reports suggested CoinDCX may have lost about $16 million in a hack, based on flagged wallet activity observed on-chain.
How has CoinDCX responded to the hack claims?
CoinDCX denied suffering a new hack, saying the flagged wallets are linked to its 2025 security breach rather than a fresh attack.
Who is ZachXBT and why does their input matter here?
ZachXBT is a blockchain investigator known for tracing suspicious on-chain fund movements, and has publicly questioned CoinDCX's explanation of the wallet activity.
Has the $16 million hack claim been confirmed?
No. CoinDCX disputes the claim, and the matter remains unresolved pending further clarification or independent verification.