Indian cryptocurrency exchange CoinDCX recently experienced a breach in one of its internal accounts, resulting in a loss of $44 million. However, the company reassured its customers that no user funds were affected, and the security of customer assets remains intact.
CoinDCX Breach Linked to Operational Account
CoinDCX CEO Sumit Gupta confirmed that the breach occurred in an internal operational account, which is used exclusively for liquidity provisioning with a partner exchange. According to Gupta, the breach was caused by a sophisticated server attack.
The company responded promptly by putting the affected account in isolation to reduce possible exposure. Gupta stressed that the affected account did not have access to customer wallets in any way thus customer money was never jeopardized. This hack follows this week’s major exploit on crypto trading platform BigONE which lost over $27 million in user funds.
“Since our operational accounts are segregated from customer wallets, the exposure is only limited to this specific account and is being fully absorbed by us, from our own treasury reserves,” Gupta said in an X post. This approach ensured that no customer funds were impacted, and all services, including trading and INR withdrawals, continued without interruption.
Investigation and Security Measures
Following the breach, CoinDCX’s internal security team, in collaboration with leading cybersecurity experts, began investigating the incident.
The emphasis is put on discovering its root cause, patching any exploits and tracking the usage of stolen assets. Moreover, the exchange is collaborating with its partner exchange to block and retrieve the drained funds.
CoinDCX has ensured that they will add to their security infrastructure to ensure such happenings never occur in the future. The company is also envisioning initiating a bug bounty program in an attempt to augment its security efforts.
Previous Cybersecurity Incidents in the Crypto Industry
This breach comes almost exactly one year after another major Indian exchange, WazirX, was hacked for $235 million. The recurring nature of these attacks highlights the ongoing cybersecurity challenges faced by the cryptocurrency industry.
ZachXBT notes that the hacker sent 1 Ethereum (ETH) to Tornado Cash. He could also traced the movement of stolen funds to other blockchain networks such as a SOL-ETH bridge. This thorough exploration has given information about the movement and tactics of the hacker and assisted CoinDCX in its attempts to pursue the money further.
However, CoinDCX has not yet disclosed the full details of how the breach occurred. Despite the breach, CoinDCX’s CEO reiterated the safety of user funds. “Your assets remain completely safe and protected in our secure cold wallet infrastructure,” Gupta reassured customers. The company has made it clear that it will absorb the losses from its own reserves, ensuring that there is no financial impact on users.
Kelvin Munene Murithi
Kelvin Munene is a crypto and finance journalist with over 5 years of experience, offering in-depth market analysis and expert commentary .
With a Bachelor’s degree in Journalism and Actuarial Science from Mount Kenya University, Kelvin is known for his meticulous research and strong writing skills, particularly in cryptocurrency, blockchain, and financial markets.
His work has been featured across top industry publications such as Coingape, Cryptobasic, MetaNews, Cryptotimes, Coinedition, TheCoinrepublic, Cryptotale, and Analytics Insight among others, where he consistently provides timely updates and insightful content.
Kelvin’s focus lies in uncovering emerging trends in the crypto space, delivering factual and data-driven analyses that help readers make informed decisions. His expertise extends across market cycles, technological innovations, and regulatory shifts that shape the crypto landscape.
Beyond his professional achievements, Kelvin has a passion for chess, traveling, and exploring new adventures.
Why trust CoinGape: CoinGape has covered the cryptocurrency industry since 2017, aiming to provide informative insights to our readers. Our journalists and analysts bring years of experience in market analysis and blockchain technology to ensure factual accuracy and balanced reporting. By following our Editorial Policy, our writers verify every source, fact-check each story, rely on reputable sources, and attribute quotes and media correctly. We also follow a rigorous Review Methodology when evaluating exchanges and tools. From emerging blockchain projects and coin launches to industry events and technical developments, we cover all facets of the digital asset space with unwavering commitment to timely, relevant information.
Investment disclaimer: The content reflects the author’s personal views and current market conditions. Please conduct your own research before investing in cryptocurrencies, as neither the author nor the publication is responsible for any financial losses.
Ad Disclosure: This site may feature sponsored content and affiliate links. All advertisements are clearly labeled, and ad partners have no influence over our editorial content.
