CoinDCX connected the transfers to wallets that had been compromised back in July 2025, though analysts noted that these addresses remained tied to its ongoing functions.
The Indian digital asset exchange rejected allegations of a fresh security compromise after market monitors highlighted unusual movements of funds, yet security researchers cast doubt on its assertion that it abandoned those wallets following a breach in July 2025.
The questioned transactions concerned legacy wallets initialized in January 2025, which were compromised during July 2025 and have not been utilized by the trading platform since that time, as stated by CoinDCX via X on Thursday.
On-chain specialist ZachXBT disputed that narrative, pointing out that a CoinDCX deposit location continued operating under a liquidity provider for ten months subsequent to the July 2025 event. He explained that the specific endpoint kept routing customer deposits directly into CoinDCX’s active public hot wallet while simultaneously acquiring assets to pay for gas fees.
Sumit Gupta, CEO of CoinDCX, answered, “Yes, aware of that. We’re investigating it further, and will share an update soon,” adding, “We assure that no user funds will be at loss.”
Earlier on Thursday, Darcy, co-founder of the asset recovery network FlashRescue, pointed out roughly $16 million worth of movements originating from addresses attributed to CoinDCX.
Darcy additionally asserted that a pair of addresses featured in CoinDCX’s most recent proof of reserves documentation had transferred capital to the flagged Tron destination.
Previously, CoinDCX suffered a $44 million drain in July of the previous year. At that juncture, the exchange asserted that user wallets remained completely segregated from the impacted account and that it would absorb the deficit using internal corporate funds.
CoinDCX did not provide a statement when contacted by Cointelegraph prior to publication.
Related: HEX token sellers erase $160M following reports of Richard Heart’s arrest
Originally published at https://cointelegraph.com/news/coindcx-suspicious-outflows-wallet-compromised-2025-exploit?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound.
