Indian crypto exchange CoinDCX said on October 25, 2026, that an attack on legacy wallet infrastructure led to the loss of 15.99 million USDT after suspicious transactions on October 21. It said it covered the loss with its own funds, leaving customer assets and balances unaffected; deposits and withdrawals continued without restrictions.
CoinDCX said some users had kept sending funds to addresses compromised in a July 2025 hack. It attributed the loss to a failed system that let those deposits accumulate at a vulnerable legacy address, but did not say how the attackers accessed the funds or whether they were connected to the earlier attack. Onchain analyst ZachXBT disputed the exchange’s account of its use of the old infrastructure and urged users to withdraw their assets.
