On October 21-22, 2026, on-chain analysts detected the movement of approximately $15.99 million in USDT and 5,784 TRX from wallets associated with the Indian crypto exchange CoinDCX. Arkham Intelligence reported that these funds were transferred from addresses identified as deposit and hot wallets on the Tron network to various centralized exchanges, including Binance, OKX, and Gate.io.
CoinDCX co-founder Sumit Gupta stated that the wallets in question were compromised during a July 2025 incident, which resulted in a loss of $44 million from an internal liquidity wallet. Gupta asserted that these addresses were retired following that hack and that current operational wallets remain unaffected. He emphasized that user funds are secure and platform services continue to operate normally.
Blockchain investigator ZachXBT challenged this account, noting that at least one of the flagged addresses continued to receive user deposits and gas fees until April-May 2026. This timeline suggests the address remained active for approximately 10 months after the exchange claimed it was compromised. The discrepancy raises questions regarding the status of user deposits sent to these addresses during that period.
