CoinDCX Loses $16 M After Hack Exploits Deprecated Wallet System
What Happened — CoinDCX, an Indian cryptocurrency exchange, confirmed that attackers stole approximately $16 million by exploiting weaknesses in a wallet system the company had stopped using after a prior breach in July 2025. An automated service that moves customer deposits between wallets temporarily failed, causing funds to accumulate in the legacy wallet. Attackers then accessed the stale wallet and transferred the assets. The breach was first denied by the CEO, but blockchain analysts publicly flagged suspicious transactions, prompting the exchange to acknowledge the loss. CoinDCX absorbed the loss and says customer funds remain protected; trading, deposits and withdrawals continue as normal.
Why It Matters for Trust & Control Assurance — The incident shows how inadequate decommissioning and monitoring of legacy crypto‑wallet infrastructure can breach a core control objective: maintaining secure configuration and lifecycle management of critical assets.
Who Is Affected — Cryptocurrency exchanges, digital‑asset custodians, and any organization that manages high‑value token wallets.
Recommended Actions
- Inventory all wallet‑related services and retire any that are no longer in production.
- Implement continuous configuration monitoring and automated alerts for any unexpected fund accumulation.
- Enforce segregation of duties for wallet operations and require multi‑factor approval for large transfers.
- Conduct a post‑incident audit to collect evidence of control gaps and remediate them.
Technical Notes
- Attack vector: Misconfiguration / legacy system exploitation.
- No public CVE; the weakness stemmed from an outdated wallet that lacked recent security patches and proper access controls.
- Data type: Cryptocurrency assets (digital tokens).