CoinDCX tied the transfers to wallets compromised in July 2025, but investigators said the addresses remained linked to its operations.
Indian cryptocurrency exchange CoinDCX denied a new security breach after analysts flagged suspicious transfers, but investigators questioned its claim that it stopped using the wallets after a July 2025 hack.
The flagged transactions involved old wallets created in January 2025, which were “compromised in July 2025” and have not been used by the exchange since, CoinDCX said Thursday on X.
Blockchain investigator ZachXBT challenged that account, saying a CoinDCX deposit address remained in use by a liquidity provider for 10 months after the July 2025 incident. He said the address continued transferring user deposits to CoinDCX’s current public hot wallet and receiving funds to cover transaction fees.
