Indian crypto exchange CoinDCX has fallen victim to a security breach involving an internal wallet, with losses estimated at around $44.2 million, according to blockchain investigator ZachXBT and security firm Cyvers.
The exploit was first flagged after on-chain data revealed suspicious activity involving Tornado Cash. The attacker reportedly received 1 ETH via the crypto mixer before executing a series of cross-chain transfers, moving funds from Solana to Ethereum—a technique often used for laundering.
CoinDCX CEO Sumit Gupta confirmed the incident, clarifying that the compromised wallet was used for liquidity management on a partner platform and did not hold customer assets. He assured users that all funds remain safe.
Cyvers Alerts, which initially detected the anomaly, noted that the stolen funds were quickly dispersed across multiple wallets and protocols, complicating the traceability.
The affected wallet was not listed in CoinDCX’s proof-of-reserve reports, further obscuring early detection.
The platform has since frozen impacted systems and launched a full investigation with third-party security experts.
Source: https://coindoo.com/crypto-exchange-coindcx-hit-by-major-exploit-ceo-responds/