CoinDCX Rejects New Breach Claims Amid Investigator Scrutiny

CEO Sumit Gupta rejected allegations of a fresh security failure on October 22, stating that the USDT and TRX transfers involved addresses compromised during a $44 million hack in July 2025. According to Gupta, these wallets were generated in January 2025 and are no longer part of the exchange’s active infrastructure. He characterized the recent transaction alerts as a potential false alarm, asserting that current operational and customer wallets remain isolated from the incident.

Prominent investigator ZachXBT challenged this narrative, pointing to specific on-chain evidence that contradicts the company’s timeline. ZachXBT highlighted a deposit address, identified as TQKJQ, which reportedly continued to handle user deposits and interact with CoinDCX’s hot wallets as recently as May 2026—nearly a year after the initial breach. This discrepancy suggests that funds may have been flowing into supposedly compromised infrastructure long after the exchange claimed to have secured its systems. While CoinDCX has pledged to provide further clarification as its internal investigation proceeds, the lack of a public reconciliation of these transactions has left the status of the $15.8 million in question.