Cyber Security News

CoinDCX Hack Leads to $44.2 Million Loss

Major Indian cryptocurrency exchange CoinDCX has confirmed a significant security breach that resulted in approximately $44 million in losses, though company executives maintain that customer funds remain completely secure and unaffected by the incident.

CoinDCX co-founder Sumit Gupta publicly confirmed reports of the cyberattack, which occurred on Saturday, July 19, 2025.

The hackers successfully gained unauthorized access to one of the company’s internal operational accounts, specifically designed to provide liquidity for facilitating smoother trading operations on the platform.

Crucially, this compromised account operates separately from customer wallet systems, ensuring that user funds remained isolated from the security breach.

The swift response from CoinDCX’s security teams helped contain the incident quickly by isolating the affected operational account.

This immediate action prevented the breach from spreading to other systems or potentially impacting customer assets stored on the platform.

Customer Impact and Platform Operations

Despite the significant financial loss, Gupta emphasized that all core platform functions continue operating normally.

Trading activities and withdrawal processes remain fully functional, allowing customers to conduct their cryptocurrency transactions without interruption.

The company’s segregated account architecture proved effective in protecting customer assets during this security incident.

“I confirm that the CoinDCX wallets used to store customer assets are not impacted and are completely safe,” Gupta stated in a transparent social media post addressing growing media coverage of the security breach.

 This public communication aimed to reassure customers and maintain trust during a potentially unsettling period.

CoinDCX has committed to absorbing the entire $44 million loss through its treasury reserves, ensuring that customers face no financial impact from the security breach.

The company’s internal security and operations teams are currently collaborating with leading cybersecurity partners to conduct a comprehensive investigation into the incident.

The investigation focuses on multiple critical areas: identifying security vulnerabilities that enabled the breach, implementing additional safety measures to prevent future incidents, and tracing the movement of compromised funds.

Gupta acknowledged that while customer funds remain secure, security breaches can be deeply concerning for users and promised to provide regular updates as the investigation progresses.

This security incident occurs during a period of strong growth for CoinDCX. The exchange reported a remarkable 32% month-on-month increase in spot trading volumes in May 2025, reaching $492 million compared to $374 million in April.

Year-over-year performance showed even more dramatic growth, with volumes jumping 132% from $212 million in June 2024 to current levels.

The company views this incident as a learning opportunity to further strengthen its security infrastructure and maintain its position in India’s rapidly expanding cryptocurrency market.

Get Free Ultimate SOC Requirements Checklist Before you build, buy, or switch your SOC for 2025 - Download Now

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Storm-2603 Hackers Exploit SharePoint and Abuse Cloudflare Tunnel to Hide Remote Access

A December intrusion to Storm-2603, the China-based group Microsoft ties to Warlock ransomware. The attackers…

2 minutes ago

OpenSSH sshole Flaw Allows Hackers to Log Into Password-Disabled Linux Accounts Using 257-Character Passwords

A decade-old authentication bypass in OpenSSH on musl-based Linux lets attackers log into accounts that…

5 minutes ago

New GhostMap Android Vulnerability Can Crash Phones Permanently Without Opening an App or Granting Permissions

Bitdefender researchers have revealed a vulnerability called GhostMap that affects Android devices. This vulnerability can…

15 minutes ago

Microsoft Paint Vulnerability Allows Hackers to Execute Malicious Code Remotely Without User Interaction

Microsoft has announced a vulnerability in Windows Paint that could let unauthenticated attackers execute malicious…

38 minutes ago

ARTEX AI Framework Linked to Bank Breaches and Cloud Attacks Found Exposed Across Hundreds of Servers

An autonomous penetration-testing framework linked to South Korean banking breaches and cloud supply-chain attacks is…

1 hour ago

Shopify Makes IP Allowlisting Mandatory for All Public Apps to Prevent Stolen API Token Abuse

Shopify is making IP allowlisting mandatory for all public apps to limit abuse of stolen…

1 hour ago