Indian cryptocurrency exchange CoinDCX recently experienced a sophisticated cyberattack, resulting in the theft of approximately $44 million from an internal operational account. Despite the significant financial loss to the company, CoinDCX has confirmed that all user funds remain secure and unaffected, stored in segregated cold wallets. The incident highlights ongoing cybersecurity challenges within the crypto industry.
CoinDCX Suffers $44 Million Internal Breach
On July 19, 2025, CoinDCX, a prominent Indian cryptocurrency exchange, was targeted in a cyberattack that led to the compromise of one of its internal operational accounts. This account, specifically used for liquidity provisioning with a partner exchange, was breached through a sophisticated server exploit. The attackers successfully drained an estimated $44 million from this internal fund.
User Funds Remain Secure
CoinDCX CEO Sumit Gupta quickly addressed the incident, reassuring users that their assets were not impacted. Gupta stated that customer funds are stored in secure cold wallet infrastructure, which is segregated from the operational accounts. The company has absorbed the entire loss from its own treasury reserves, ensuring no financial impact on its users. Trading activities and INR withdrawals on the platform continue to operate normally.
Key Takeaways
-
Internal Account Compromised: The breach specifically targeted an internal operational account used for liquidity, not customer-facing wallets.
-
Significant Financial Loss: Approximately $44 million was stolen from CoinDCX's internal reserves.
-
User Funds Unaffected: CoinDCX confirmed that all customer funds are safe and were not compromised during the attack.
-
Rapid Response: The incident was quickly contained by isolating the affected account, and the company is working with cybersecurity partners to investigate and patch vulnerabilities.
-
Transparency and Assurance: CoinDCX has committed to full transparency regarding the incident and is exploring a bug bounty program to enhance security.
Industry-Wide Security Concerns
This incident follows a trend of cyberattacks on cryptocurrency exchanges, including a $234 million hack on WazirX exactly one year prior. Such breaches underscore the persistent cybersecurity threats facing the crypto industry and raise questions about the robustness of security measures. Industry experts emphasize the critical need for multi-layered security strategies, including cold storage solutions, multi-signature wallets, and continuous security audits, to protect against sophisticated attacks.
Sources
-
Threat Actors Walk Away With $44 Million, StartupNews.fyi.
-
Crypto exchange CoinDCX hit by cyberattack, $44 million drained from internal operational account, Moneycontrol.
-
Indian Crypto Exchange CoinDCX Hacked For $44 Million, BeInCrypto.
-
$44mln Stolen, Customer Assets Safe, AInvest.
This article was created with support from AI-driven technology, drawing on multiple reputable sources. The final content has been thoroughly reviewed and edited by BlockzHub's editorial team to ensure accuracy, clarity, and coherence. Original reporting sources are credited whenever appropriate and as required. The opinions expressed in this article do not necessarily represent the official views or positions of BlockzHub. This article is intended for informational purposes only and should not be considered financial or professional advice. Investing involves risk, and you should consult a qualified financial advisor before making any investment decisions.