The post CoinDCX Offers Massive Bounty Program After $44M Hack appeared first on Coinpedia Fintech News
CoinDCX, one of India’s largest exchanges, suffered a $44.2 million hack on July 19, 2025, after attackers targeted an internal trading wallet. The hackers stole $28.3 million in SOL and $15.78 million in ETH, using Tornado Cash to cover their tracks. CoinDCX quickly secured the wallet and promised to cover losses from their treasury.
Sumit Gupta, the CEO of CoinDCX, shared that it has received over 31,000 INR withdrawal requests in the past 24 hours. 98% of these have already been processed, and the remaining 600 are expected to be completed within 72 hours of the request. He assured users that customer funds are 100% safe, as all user assets are stored in segregated cold wallets.
25% Reward for Tracing Stolen Crypto
In a latest update, the CEO has announced a Recovery Bounty Program. Up to 25% of any recovered funds will be awarded to those who help trace and retrieve the stolen crypto, with a potential reward pool of up to $11 million if the full amount is retrieved.
The goal is to get useful leads that help track down the stolen crypto, identify the attackers, and support legal action. The program is open to ethical hackers, white-hat researchers, and anyone who wants to help make crypto safer for everyone.
The CEO clarified that the loss came from CoinDCX’s reserves, not customer funds, and has already been covered. The platform remains fully operational and financially strong.
Announcing the @CoinDCX Recovery Bounty Program: Up to 25% of any recovered funds will be awarded to individuals or teams who can help trace and retrieve the stolen crypto.
Just to give more context: -> We want to be upfront. The exposure was from our own reserves, and we have… https://t.co/GHHlxf3PxB
WazirX News: Singapore Court Hearing Set for July 15, Reserve Date July 16
,
Gupta noted that the priority is to identify and catch the attackers, to help prevent such incidents across the entire crypto industry.
“Cybercrime is an attack on trust. And when one of us is targeted, all of us feel it,” the exchange shared in a blog post. It says that the bounty isn’t just about getting the money back, it’s about protecting trust in the Web3 ecosystem and setting a higher standard for security and response.
Users Raise Transparency Issues
Users have raised concerns about how crypto exchanges handle security issues. While global platforms like Bybit alert users within an hour of a wallet breach, Indian exchanges like WazirX and CoinDCX have taken several hours to do the same. These delays show the need for faster updates and more transparency from Indian crypto platforms.
This incident follows the $230M WazirX hack in 2024, highlighting growing threats to Indian crypto exchanges.
function subscribed_popupmodal(template_id) { var templateId = ‘6’; getAllSubscriberCategoryList([templateId]); var subcribemodal = window.parent.document.getElementById(‘subscribe-modal-design’); if (subcribemodal) { var modalContent = `
Never Miss a Beat in the Crypto World!
Stay informed and gain the edge you need to navigate the crypto world. Select your subscription now
if (storeCheckedId.length === 0) { var unsubcribedPopUpmodal =
`
You’ve Unsubscribed Successfully
We’re sorry to see you go! Your subscription has been canceled. If you change your mind, you can re-subscribe anytime. Thank you for being part of our community!
Thank you for subscribing to our crypto and blockchain newsletter! You’ll now receive the latest news, insights, and updates straight to your inbox. Welcome to our community!
`;
let selectedSubscriptionsArray = selectedSubscriptionsString.split(‘,’); let subscribedCategories = selectedSubscriptionsArray.map(subscription => subscription.split(‘_’)[0]); let subscribedCategoriesString = subscribedCategories.join(‘, ‘);
subscribedmodal.innerHTML = subscribedPopupModal; if (document.getElementById(‘selectidname’)) { document.getElementById(‘selectidname’).textContent = subscribedCategoriesString; }
function closeModal(template_id) { var modalId = template_id; var modal = document.querySelector(‘#’ + modalId); // Using querySelector to find the modal
// Function to get cookies function getCookie(name) { let value = “; ” + document.cookie; let parts = value.split(“; ” + name + “=”); if (parts.length == 2) return parts.pop().split(“;”).shift(); }
// Get user token from cookies const userToken = getCookie(‘user_token’);
if (subscribewithoutData === ‘true’ && userToken) { // Call the modal function with the category ID subscribed_popupmodal(subscribe_clicked_cat_id);
// Remove the flag and category ID from localStorage localStorage.removeItem(‘subscribe_without_Login’); localStorage.removeItem(‘subscribe_clicked_id’); } });
var listItems = document.querySelectorAll(‘.subscription-options li’); if (listItems.length === 0) return;
var anyActive = false; listItems.forEach(function(item) { var checkbox = item.querySelector(‘input[type=”checkbox”]’); if (checkbox) { if (checkbox.checked) { item.classList.add(‘active’); anyActive = true; // Set anyActive to true } else { item.classList.remove(‘active’); // Remove ‘active’ class if checkbox is unchecked } } });
}
function updateButtonText(anyActive) { var subscribeButtonSpan = document.querySelector(‘.subscribe-submit .changeBtnText’); if (subscribeButtonSpan) { if (anyActive) { subscribeButtonSpan.textContent=”Subscribe Now”; } else { subscribeButtonSpan.textContent=”Unsubscribe”; } } }
function updateSubscriptionButton() { var listItems = document.querySelectorAll(‘.subscription-options li’); if (listItems.length === 0) return;
var anyActive = false; listItems.forEach(function(item) { var checkbox = item.querySelector(‘input[type=”checkbox”]’); if (checkbox) { if (checkbox.checked) { item.classList.add(‘active’); anyActive = true; // Set anyActive to true } else { item.classList.remove(‘active’); // Remove ‘active’ class if checkbox is unchecked } } });
// Update the button text based on whether any list item has the ‘active’ class updateButtonText(anyActive); } document.addEventListener(‘click’, function(event) { var clickedItem = event.target.closest(‘.subscription-options li’); if (clickedItem) { var checkbox = clickedItem.querySelector(‘input[type=”checkbox”]’); if (checkbox) { checkbox.checked = !checkbox.checked; updateSubscriptionButton(); } } });
FAQs
What happened to CoinDCX?
CoinDCX experienced a $44.2 million hack on July 19, 2025, targeting an internal operational wallet used for liquidity. The exchange has confirmed customer funds are safe, as the loss was covered by its treasury, and has launched a recovery bounty program.
Are CoinDCX customer funds safe after the hack?
Yes, CoinDCX assured users that customer funds are 100% safe, as all user assets are stored in segregated cold wallets. The loss came from CoinDCX’s own treasury.
How did the hackers try to cover their tracks?
The hackers used Tornado Cash, a crypto mixer, to obscure the transaction trails of the stolen funds, making them more difficult to trace.