{"id":77649,"date":"2025-07-20T09:32:10","date_gmt":"2025-07-20T09:32:10","guid":{"rendered":"https:\/\/www.europesays.com\/us\/77649\/"},"modified":"2025-07-20T09:32:10","modified_gmt":"2025-07-20T09:32:10","slug":"indian-crypto-exchange-coindcx-hacked-loses-44-2-mln-overnight","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/us\/77649\/","title":{"rendered":"Indian crypto exchange CoinDCX hacked, loses $44.2 mln overnight"},"content":{"rendered":"<p>\t\t\t\t\t\t\t\tKey Takeaways<\/p>\n<p>An internal wallet compromise resulted in a $44.2 million cross-chain hack for Indian crypto exchange CoinDCX. The CEO confirmed user funds were safe, and all trading activity remained fully operational.<\/p>\n<p>One of the largest crypto exchanges in India, CoinDCX, lost $44 million in a significant hack.<\/p>\n<p>The hack occurred in the early hours of Saturday in India, and came after the $230 million exploit that took down the Indian exchange WazirX almost exactly a year ago.<\/p>\n<p>Well-known blockchain sleuth ZachXBT was the first to identify the <a href=\"https:\/\/t.me\/investigations\/264\" data-wpel-link=\"external\" target=\"_blank\" rel=\"nofollow external noopener noreferrer\">hack<\/a> via a post on Telegram.<\/p>\n<blockquote>\n<p>\u201cLooks like the India centralized exchange \u2018CoinDCX\u2019 was likely drained for ~$44.2M almost 17 hours ago and has yet to disclose the incident to the community\u201c.<\/p>\n<\/blockquote>\n<p>Minutes after the investigator\u2019s post, the CEO of CoinDCX, <a href=\"https:\/\/x.com\/smtgpt\" target=\"_blank\" rel=\"noopener nofollow external noreferrer\" data-wpel-link=\"external\">Sumit Gupta<\/a>, confirmed the incident in a <a href=\"https:\/\/x.com\/smtgpt\/status\/1946597988660645900\" target=\"_blank\" rel=\"noopener nofollow external noreferrer\" data-wpel-link=\"external\">post on X<\/a>.<\/p>\n<blockquote>\n<p>\u201cToday, one of our internal operational accounts \u2013 used only for liquidity provisioning on a partner exchange \u2013 was compromised due to a sophisticated server breach. I confirm that the CoinDCX wallets used to store customer assets are not impacted and are completely safe.\u201d<\/p>\n<\/blockquote>\n<p>He added,<\/p>\n<blockquote>\n<p>\u201cNo customer funds have been impacted. Your assets remain completely safe and protected in our secure cold wallet infrastructure. All trading activity and INR withdrawals are fully operational.\u201d<\/p>\n<\/blockquote>\n<p><a href=\"https:\/\/www.europesays.com\/us\/wp-content\/uploads\/2025\/07\/CoinDCX-hack.jpg\" data-wpel-link=\"internal\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-512543\" class=\"size-full wp-image-512543\" src=\"data:image\/svg+xml,%3Csvg%20xmlns=\" http:=\"\" alt=\"CoinDCX hack\" width=\"1280\" height=\"551\" data-lazy- data-lazy- data-lazy-src=\"https:\/\/www.europesays.com\/us\/wp-content\/uploads\/2025\/07\/CoinDCX-hack.jpg\"\/><\/a><\/p>\n<p id=\"caption-attachment-512543\" class=\"wp-caption-text\">Source: <a href=\"https:\/\/t.me\/investigations\/264\" target=\"_blank\" rel=\"noopener nofollow external noreferrer\" data-wpel-link=\"external\">ZachXBT<\/a><\/p>\n<p>The hack came to light after blockchain security firm Cyvers flagged the stolen crypto due to the suspicious transactions. ZachXBT manually identified the affected wallet as belonging to CoinDCX. He wrote,<\/p>\n<blockquote>\n<p>\u201cThe attacker address was funded with 1 ETH from Tornado Cash and later bridged a portion of the stolen funds from Solana to Ethereum.\u201d<\/p>\n<\/blockquote>\n<p>Crypto hackers have been active in recent weeks<\/p>\n<p>On Wednesday, the 18th of June, Iranian crypto exchange Nobitex was hacked. The attack was a <a href=\"https:\/\/ambcrypto.com\/irans-nobitex-crypto-exchange-hit-by-81-mln-hack-israel-group-claims-responsibility\/\" target=\"_blank\" rel=\"noopener nofollow\" data-wpel-link=\"internal\">politically motivated one<\/a> made by the pro-Israel hacker group that calls itself \u00a0\u201cGonjeshke Darande.\u201d<\/p>\n<p>AMBCrypto reported that the hack was worth $81 million, and vanity addresses were used to taunt and exploit the platform\u2019s vulnerabilities.<\/p>\n<p>Another exchange operating on the Arbitrum blockchain called GMX V1 suffered an exploit on the 9th of July.<\/p>\n<p>GMX V1, a version of the GMX protocol, was exploited for a <a href=\"https:\/\/www.halborn.com\/blog\/post\/explained-the-gmx-hack-july-2025\" target=\"_blank\" rel=\"noopener nofollow external noreferrer\" data-wpel-link=\"external\">reentrancy vulnerability<\/a>, and the hacker captured $42 million.<\/p>\n<p>Several days later, the hacker accepted a $5 million white hat bounty and returned $40 million of the stolen funds.<\/p>\n<p>A Bitcoin DeFi platform on the Stacks blockchain, Alex Protocol, saw a <a href=\"https:\/\/x.com\/ALEXLabBTC\/status\/1931014419133169734\" target=\"_blank\" rel=\"noopener nofollow external noreferrer\" data-wpel-link=\"external\">$8.3 million loss<\/a> in a hack on the 6th of June. It is one of the largest hacks on the Stacks blockchains to date.<\/p>\n<p>The Alex Lab Foundation pledged to fully reimburse affected users using its treasury reserves.<\/p>\n<p>\t\t\t\t\t\t\t\t\t\t\tNext: <a href=\"https:\/\/ambcrypto.com\/xtz-bulls-reclaim-0-7-but-should-traders-expect-a-pullback-now\/\" rel=\"prev nofollow noopener\" data-wpel-link=\"internal\" target=\"_blank\">Tezos [XTZ] bulls reclaim $0.7, but should traders expect a pullback now?<\/a>\t\t\t\t\t\t\t\t\t\t<\/p>\n","protected":false},"excerpt":{"rendered":"Key Takeaways An internal wallet compromise resulted in a $44.2 million cross-chain hack for Indian crypto exchange CoinDCX.&hellip;\n","protected":false},"author":3,"featured_media":77650,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[3244,64,67,132,68],"class_list":{"0":"post-77649","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-business","8":"tag-ambcrypto","9":"tag-business","10":"tag-united-states","11":"tag-unitedstates","12":"tag-us"},"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@us\/114884872951923566","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/posts\/77649","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/comments?post=77649"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/posts\/77649\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/media\/77650"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/media?parent=77649"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/categories?post=77649"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/tags?post=77649"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}