On October 25, 2026, CoinDCX said it lost 15.99 million USDT after an automated process for moving deposits from deprecated wallets failed, and said the company absorbed the loss. The exchange says its active wallets and trading operations were unaffected; that claim is not independently verified by the statement itself.
CoinDCX says deposits continued to reach old wallet addresses while the automated service meant to move those funds was failing for a period.
In an update dated October 25, 2026, CoinDCX linked the unusual activity to earlier wallet infrastructure that it says had been deprecated after a July 2025 security incident. The exchange said a failure in its deposit-sweeping process resulted in a 15.99 million USDT loss, which the company absorbed.
CoinDCX also said some users continued sending funds to old addresses despite guidance to use current addresses shown in its app. This is the exchange’s account of the incident, not independent confirmation of every detail.
CoinDCX says its active wallets, customer balances, and trading operations continued to function, but that claim should not be presented as an independent audit.
The company said its active trading and wallet infrastructure was not paused and that customer assets remain in segregated cold wallets. These are CoinDCX’s statements; the published update does not independently verify the status of every balance.
Blockchain data can help trace token movements, but it does not by itself identify who controlled the addresses or how access was obtained. The transfers alone therefore do not resolve every question about the incident’s mechanism.
CoinDCX’s update did not specify how long the process failed, exactly how the legacy infrastructure was compromised, or provide a complete account of the funds’ movements.
Based on the available statements, it is not possible to establish precisely how the vulnerability arose, how long the sweeping service was unavailable, or how many deposits were affected. Blockchain analysis records transactions and notes limits in attributing addresses; it is not a complete technical report on the cause of the incident.
A practical precaution for users is to check the deposit address and network in the exchange’s official app or website each time they transfer funds. Addresses saved from earlier transactions may no longer be current. This is a general safety step, not a guarantee against loss.
In its October 25, 2026 update, CoinDCX reported a loss of 15.99 million USDT and said the company absorbed it.
The exchange attributed the incident to deprecated infrastructure and a failed deposit-sweeping process. It said active wallets were unaffected; the update itself does not independently verify that claim.
It refers to a process intended to move funds from deposit addresses into an exchange’s primary wallet.
Check the current address and network in the exchange’s official app or website before each deposit instead of relying on a previously saved address.