CoinDCX Confirms $16 Million USDT Loss From Retired Wallets in India: What Happened and What Users Should Do

CoinDCX $16 million USDT loss retired wallets India

Image: CoinDCX Official — CoinDCX app icon (Google Play listing).

TL;DR: CoinDCX, India's largest crypto exchange, has confirmed it lost 15.99 million USDT (about $16 million) after funds piled up in old, retired wallet addresses that were compromised in its July 2025 hack. The company says it absorbed the loss, user funds are safe, and trading never stopped — a sharp reversal from its CEO's "false alarm" denial days earlier.

📌 KEY HIGHLIGHTS

CoinDCX confirms a 15.99 million USDT loss tied to deprecated wallet infrastructure, absorbed by the company.
The loss follows a failed automated "sweep" that was supposed to move deposits out of retired addresses.
CEO Sumit Gupta had earlier called breach reports a "false alarm" — the 25 October update reverses that denial.
CoinDCX insists its active wallets were not breached and all user funds remain safe in segregated cold wallets.
Tether froze about $2.21 million USDT linked to the incident on 22 October.

What happened?

On 21 October 2026, CoinDCX noticed unusual activity in its systems. The same day, on-chain investigators flagged roughly 15.99 million USDT plus 5,783.81 TRX moving from addresses labelled as CoinDCX's to a single TRON address, before being split toward deposit addresses at Binance, OKX and Gate. The largest single transfer was 15,819,002 USDT.

CoinDCX first pushed back. On 22 October, CEO Sumit Gupta said "CoinDCX wallets are not breached" and suggested reports of a fresh hack sounded like a "false alarm", arguing the addresses were compromised in the July 2025 incident and that hackers were simply reusing them. The exchange said the addresses were created in January 2025, compromised in July 2025, and had not been used since.

That account was immediately challenged. On-chain investigator ZachXBT said at least one address, TQKJQ, had stayed in use by a liquidity provider for months after the July 2025 hack, sweeping user deposits as recently as April and May 2026.

Then, in its blog update "Update on the on-chain Wallet Activity - 21st October 2026", shared on 25 October, CoinDCX put a number on the damage for the first time: its automated sweeping service "had failed for a particular period, causing deposits to accumulate in the deprecated address. This led to a loss of 15.99 million USDT which was absorbed by the company."

CoinDCX app official screenshot India crypto exchange

Image: CoinDCX Official — CoinDCX app screenshot (Google Play listing).

Timeline: from flag to confirmation

Date	What happened
19 July 2025	CoinDCX suffers a $44 million hack; affected wallet infrastructure is later deprecated.
21 Oct 2026	Unusual activity noticed; investigators flag ~15.99 million USDT moving from CoinDCX-labelled addresses.
22 Oct 2026	CEO calls breach reports a "false alarm"; CoinDCX admits a sweep failure and unquantified operational losses; Tether freezes ~$2.21 million USDT.
25 Oct 2026	CoinDCX blog update confirms the quantified loss: 15.99 million USDT, absorbed by the company.

Why it matters for India readers

CoinDCX is India's largest crypto exchange, with over 2 crore registered users, and it operates under the Financial Intelligence Unit's registration regime. A confirmed $16 million loss — coming just a year after a $44 million hack — goes directly to the trust question every Indian crypto user faces: how safely does an exchange handle the plumbing behind deposits?

The incident also exposes a specific, practical risk: deposit addresses do not last forever. Exchanges retire old addresses after security incidents, but users who saved an old address in another app, or whose deposits are routed automatically, can keep sending funds to a dead address. CoinDCX says it warned users to stop using the deprecated addresses — yet deposits kept arriving, and the safety net meant to catch them failed for a period.

Finally, the messaging reversal matters. Users were told on 22 October that there was no breach to worry about; three days later the same company confirmed a $16 million loss. For an industry that runs on trust, the gap between those two statements is itself part of the story.

Should you care?

✅ Verdict: If you hold crypto on CoinDCX, no action is urgent — the company says balances are fully accounted for and trading, deposits and withdrawals ran without pause. But do check one thing today: make sure the deposit address you use is the current one shown in the CoinDCX app, not a saved or reused old address. If you deposit from another platform or a bot, update the saved address there too.

What CoinDCX users should do

Verify before every deposit: always copy the latest deposit address from the CoinDCX app or website — never reuse a saved address without checking.
Update saved addresses elsewhere: if another exchange, app or automated system sends funds to CoinDCX, update the destination address there.
Watch for official updates: follow CoinDCX's blog and @CoinDCXCares for follow-ups; the company says it will strengthen monitoring of residual systems and remind users that deprecated-address maintenance is time-bound.
Keep records: if you deposited to an old address, keep the transaction hash — CoinDCX says affected deposits were credited, but your own record is your proof.

FAQs

Was CoinDCX hacked again?
CoinDCX says no: its active wallets and trading systems were not compromised. The loss came from old, deprecated wallet infrastructure compromised in July 2025, where a failed sweep let deposits accumulate. Investigators dispute how "retired" those addresses really were, but no outlet has independently confirmed a breach of CoinDCX's active wallets.

Are my funds on CoinDCX safe?
According to CoinDCX, yes — user funds remain in secure, segregated cold wallets, affected deposits were credited, and the $16 million loss was absorbed by the company. Trading, deposits and withdrawals continued without interruption.

How much was actually lost?
15.99 million USDT, roughly $16 million, plus 5,783.81 TRX in the flagged transfers. Tether froze about $2.21 million USDT linked to the incident on 22 October, leaving most of the loss with CoinDCX.

What should I do before my next deposit?
Open the CoinDCX app, generate a fresh deposit address, and use that — never an old saved address. Depositing to deprecated addresses is, in CoinDCX's own words, "highly risky", and most exchanges do not accept liability for them.

Takeaway: A retired wallet address is not a dead address — funds sent there can still move, and when the safety net fails, the loss is real. CoinDCX paid this one; the lesson for every Indian crypto user is to verify the deposit address every single time.

Follow India on TechByCountry for tomorrow's 6 PM update.

📸 Get tech in the last 24 hours on Instagram — follow @_techinlast24hrs for daily posts (9 AM–9 PM) and reels at 12:30 PM & 8:30 PM.

TechByCountry — Daily Tech News, Country by Country

Search This Blog