On October 22, CoinDCX publicly denied the occurrence of a new security breach, stating that the recent on-chain fund movements correspond to an old wallet that was compromised back in July 2025, and that these addresses are not associated with the exchange itself. ZachXBT countered that CoinDCX's deposit address TQKJQ was still in use by liquidity providers for about 10 months following the July 2025 incident, with the relevant address continuing to receive user deposits and gas fees in April and May 2026, and transferring funds to CoinDCX's current public hot wallet. He questioned the CoinDCX team's failure to clarify the whereabouts of approximately $15.8 million in user deposits. In the early hours of yesterday, CoinDCX's hot wallet and several deposit addresses transferred around 15.99 million USDT and 5,783.81 TRX to a specific TRON address, with the largest single transaction being 15.819002 million USDT. This address subsequently split the funds and transferred them multiple times to deposit addresses on exchanges such as Binance, OKX, and Gate.
All Comments