Indian crypto exchange CoinDCX has confirmed a $44 million security breach involving one of its internal liquidity accounts.
The incident was publicly disclosed on Saturday by CEO and co-founder Sumit Gupta, shortly after blockchain investigator ZachXBT revealed details of the exploit via his Telegram channel.
The breach stemmed from what Gupta described as a “sophisticated server-side exploit” targeting an operational wallet linked to an undisclosed partner exchange. The affected wallet was used solely for managing liquidity, and no customer funds were impacted.
“Our teams moved swiftly to isolate the compromised wallet,” Gupta stated, adding that the attack was fully contained. “Since this was an internal account segregated from customer holdings, the loss will be covered entirely by our own treasury reserves.”
The company emphasized that all customer assets remain secure in cold storage wallets, which are disconnected from online systems. CoinDCX also said it has initiated a comprehensive security audit and will tighten operational risk controls to prevent future incidents.
The incident highlights ongoing vulnerabilities in centralized crypto operations, even as platforms increasingly adopt multi-tiered wallet architectures to protect user funds. Gupta assured users that all services are operating normally and that further updates will follow as the investigation progresses.
The United Kingdom’s Home Office is preparing to liquidate a massive cache of seized cryptocurrency—at least $7 billion worth of Bitcoin—according to a new report by The Telegraph.
A former National Crime Agency (NCA) officer has been sentenced to five years and six months in prison after stealing 50 BTC—now worth over £4.4 million—from a criminal investigation he was helping to lead.
The U.S. Securities and Exchange Commission (SEC) has filed emergency enforcement actions against First Liberty Building & Loan, LLC and its founder, Edwin Brant Frost IV, alleging they operated a $140 million Ponzi scheme that spanned more than a decade and defrauded around 300 investors.
A legal clash between Coin Center and the U.S. Treasury Department over sanctions imposed on Tornado Cash has officially come to an end, following a joint decision to dismiss the case.