Indian cryptocurrency exchange CoinDCX denied a new security breach after analysts flagged about $16 million in transfers from addresses labeled as its own. CoinDCX said the wallets were compromised in July 2025 and had not been used by the exchange since.
Blockchain investigator ZachXBT disputed that account, saying a CoinDCX deposit address continued handling user deposits and receiving transaction-fee funds for 10 months after the July 2025 hack. CoinDCX CEO Sumit Gupta said the exchange was investigating and assured users they would not lose funds. Darcy, who first flagged the transfers, also claimed that two addresses in CoinDCX’s latest proof of reserves sent funds to the flagged Tron address.
