{ "version": 1, "event_id": "evt_e0ae57f3cefe9440", "url": "https://xiyu.news/events/evt_e0ae57f3cefe9440/", "json": "https://xiyu.news/api/events/evt_e0ae57f3cefe9440.json", "type": "security_incident", "status": "developing", "category": "crypto", "title": { "zh": "CoinDCX 热钱包及存款地址约 1600 万美元 USDT 与 TRX 可疑流出，交易所承认旧钱包清退失败造成损失", "en": "【Salus CMO：CoinDCX 疑似被盗约 1599 万 USDT 及部分 TRX】" }, "current_state": { "zh": "该约 1600 万美元的 CoinDCX 可疑资金外流事件已从 Salus 的初步疑似被盗报告，发展为 CoinDCX 承认旧钱包资金因归集失败形成运营损失、但否认误导，并与链上调查人员就地址归属和资金性质存在公开争议。", "en": "The roughly $16 million CoinDCX suspicious outflow has moved from Salus’s initial suspected-theft report to a public dispute: CoinDCX acknowledges operational losses from failed sweeping of old compromised wallets while denying misleading statements, and blockchain investigators contest its account of address ownership and fund movement." }, "first_seen_at": "2026-10-22T06:31:30.926794+00:00", "last_updated_at": "2026-10-22T17:28:55.788994+00:00", "last_material_change_at": "2026-10-22T17:28:55.788994+00:00", "confidence": 0.75, "updates_count": 3, "sources_count": 8, "entities": [ "after", "breach", "cmo", "coindcx", "faces", "hack", "million", "operational-losses", "salus", "suspected", "trx", "usdt", "zachxbt" ], "identifiers": [], "topics": [ "blockchain-forensics", "coindcx", "exchange-security", "fund-flows", "hack-allegation", "hacked-wallets", "hacks", "india-crypto", "on-chain-forensics", "on-chain-investigation", "operational-losses", "proof-of-reserves", "tron", "usdt", "user-deposits", "wallet-compromise", "zachxbt" ], "updates": [ { "update_id": "upd_a0f5a11a72f194c0", "event_id": "evt_e0ae57f3cefe9440", "occurred_at": "2026-10-22T05:44:55Z", "published_at": "2026-10-22T05:44:55Z", "first_seen_at": "2026-10-22T06:31:30.926794Z", "time_precision": "published", "update_type": "initial", "material_change": true, "title_zh": "【Salus CMO：CoinDCX 疑似被盗约 1599 万 USDT 及部分 TRX】", "title_en": "【Salus CMO：CoinDCX 疑似被盗约 1599 万 USDT 及部分 TRX】", "what_changed_zh": "Salus 首席营销官报告称，10 月 21 日约有 1599 万 USDT 和 5,783.81 TRX 从 CoinDCX 热钱包和充值地址转出至一个 TRON 地址，随后资金被拆分并转往 Binance、OKX 和 Gate 的充值地址，此事被描述为疑似盗窃。", "what_changed_en": "Salus's CMO reported that roughly 15.99 million USDT and 5,783.81 TRX moved out of CoinDCX hot wallets and deposit addresses to a TRON address on October 21, with the funds subsequently split and transferred toward Binance, OKX and Gate deposit addresses, in what is being described as a suspected theft.", "current_state_zh": "Salus 首席营销官报告称，10 月 21 日约有 1599 万 USDT 和 5,783.81 TRX 从 CoinDCX 热钱包和充值地址转出至一个 TRON 地址，随后资金被拆分并转往 Binance、OKX 和 Gate 的充值地址，此事被描述为疑似盗窃。", "current_state_en": "Salus's CMO reported that roughly 15.99 million USDT and 5,783.81 TRX moved out of CoinDCX hot wallets and deposit addresses to a TRON address on October 21, with the funds subsequently split and transferred toward Binance, OKX and Gate deposit addresses, in what is being described as a suspected theft.", "detailed_summary_zh": "Salus's CMO reported that roughly 15.99 million USDT and 5,783.81 TRX moved out of CoinDCX hot wallets and deposit addresses to a TRON address on October 21, with the funds subsequently split and transferred toward Binance, OKX and Gate deposit addresses, in what is being described as a suspected theft.", "detailed_summary_en": "Salus's CMO reported that roughly 15.99 million USDT and 5,783.81 TRX moved out of CoinDCX hot wallets and deposit addresses to a TRON address on October 21, with the funds subsequently split and transferred toward Binance, OKX and Gate deposit addresses, in what is being described as a suspected theft.", "background_zh": "CoinDCX在2025年7月披露一起4400万美元被盗事件，起因是一名软件工程师用于兼职工作的公司笔记本电脑被入侵。平台称2025年1月创建的相关钱包地址在该事件中遭到入侵，此后CoinDCX已不再使用。随后有链上调查人员标记了约1600万美元的可疑资金转移，涉及据称与该交易所相关的地址。", "background_en": "CoinDCX disclosed a $44 million hack in July 2025 that followed the compromise of a software engineer's company laptop used for side work. The exchange says wallet addresses created in January 2025 were compromised in that incident and have not been used by CoinDCX since. Blockchain investigators subsequently flagged roughly $16 million in suspicious movements tied to addresses said to be associated with the exchange.", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "这场争议使市场持续关注交易所的托管流程与存款地址管理，这一渠道可能影响印度现货平台的用户信心与存款流入。CoinDCX称活跃钱包与平台资金未被盗，限制了事件向其他交易所的即时传导，但去向不明资金的相关疑问仍未解开，构成该平台的舆情风险。", "market_impact_en": "The dispute keeps attention on exchange custody practices and deposit-address hygiene, a channel that can affect user confidence and deposit flows on Indian spot venues. CoinDCX's statement that active wallets and platform funds were untouched limits any immediate read-across to other exchanges, though unresolved questions about the unaccounted funds remain a sentiment risk for the platform.", "importance_score": 7.5, "references": [ { "url": "https://en.wikipedia.org/wiki/ZachXBT", "title": "ZachXBT - Wikipedia" }, { "url": "https://beincrypto.com/learn/zachxbt-crypto-scam/", "title": "Who Is ZachXBT, the Crypto Sleuth Exposing Scams?" } ], "confidence": 0.75, "story_ids": [ "telegram:foresightnews:121031", "telegram:wublockchainenglish:26512", "telegram:foresightnews:121051", "telegram:foresightnews:121065", "rss:cointelegraph.com_rss:2fcac433f1546d31", "telegram:theblockbeats:201882" ], "sources": [ { "url": "https://foresightnews.pro/news/h5Detail/115738", "label": "foresightnews", "source_type": "telegram", "official": false }, { "url": "https://wublockchain.xyz/news/coindcx-suspected-16m-hack-after-44m-breach-2025-21342", "label": "wublockchainenglish", "source_type": "telegram", "official": false }, { "url": "https://foresightnews.pro/news/h5Detail/115754", "label": "foresightnews", "source_type": "telegram", "official": false }, { "url": "https://foresightnews.pro/news/h5Detail/115766", "label": "foresightnews", "source_type": "telegram", "official": false }, { "url": "https://cointelegraph.com/news/coindcx-suspicious-outflows-wallet-compromised-2025-exploit?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound", "label": "Cointelegraph", "source_type": "rss", "official": false }, { "url": "https://m.theblockbeats.info/flash/373223?from=telegram", "label": "theblockbeats", "source_type": "telegram", "official": false } ] }, { "update_id": "upd_09a25e00e1c3c3a6", "event_id": "evt_e0ae57f3cefe9440", "occurred_at": "2026-10-22T09:03:02Z", "published_at": "2026-10-22T09:03:02Z", "first_seen_at": "2026-10-22T09:33:09.312268Z", "time_precision": "published", "update_type": "escalation", "material_change": true, "title_zh": "⚡️ZachXBT质疑CoinDCX：1580万美元用户存款去向不明", "title_en": "⚡️ZachXBT质疑CoinDCX：1580万美元用户存款去向不明", "what_changed_zh": "ZachXBT 声称约 1580 万美元的 CoinDCX 用户存款仍下落不明，且一个与 2025 年安全事件相关的充值地址仍在收取用户资金并将其转入 CoinDCX 当前热钱包，CoinDCX 对此予以否认。", "what_changed_en": "ZachXBT alleged that about $15.8 million in CoinDCX user deposits remains unaccounted for and that a deposit address linked to a 2025 security incident continued collecting user funds and routing them to CoinDCX's current hot wallet, claims CoinDCX disputes.", "current_state_zh": "ZachXBT 声称约 1580 万美元的 CoinDCX 用户存款仍下落不明，且一个与 2025 年安全事件相关的充值地址仍在收取用户资金并将其转入 CoinDCX 当前热钱包，CoinDCX 对此予以否认。", "current_state_en": "ZachXBT alleged that about $15.8 million in CoinDCX user deposits remains unaccounted for and that a deposit address linked to a 2025 security incident continued collecting user funds and routing them to CoinDCX's current hot wallet, claims CoinDCX disputes.", "detailed_summary_zh": "ZachXBT alleged that about $15.8 million in CoinDCX user deposits remains unaccounted for and that a deposit address linked to a 2025 security incident continued collecting user funds and routing them to CoinDCX's current hot wallet, claims CoinDCX disputes.", "detailed_summary_en": "ZachXBT alleged that about $15.8 million in CoinDCX user deposits remains unaccounted for and that a deposit address linked to a 2025 security incident continued collecting user funds and routing them to CoinDCX's current hot wallet, claims CoinDCX disputes.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 7.5, "references": [], "confidence": 0.75, "story_ids": [ "telegram:theblockbeats:201846" ], "sources": [ { "url": "https://m.theblockbeats.info/flash/373186?from=telegram", "label": "theblockbeats", "source_type": "telegram", "official": false } ] }, { "update_id": "upd_ac8367f174caf5b5", "event_id": "evt_e0ae57f3cefe9440", "occurred_at": "2026-10-22T15:30:15Z", "published_at": "2026-10-22T15:30:15Z", "first_seen_at": "2026-10-22T17:28:55.788994Z", "time_precision": "published", "update_type": "response", "material_change": true, "title_zh": "区块链调查人员称加密交易所 CoinDCX 就 1600 万美元黑客事件“撒谎”", "title_en": "Crypto exchange CoinDCX ‘lying’ about $16M hack, say blockchain investigators", "what_changed_zh": "CoinDCX 回应称相关地址是 2025 年 1 月创建、2025 年 7 月已被攻破且不再使用的旧钱包，并将约 1600 万美元损失称为“部分运营损失”；链上调查人员反驳其说法，指其前后表述矛盾，且资金最终流向与旧事件不同的洗钱地址。", "what_changed_en": "CoinDCX responded that the addresses were old wallets created in January 2025 and compromised in July 2025, claimed they were no longer in use, and described the roughly $16 million as “operational losses”; blockchain investigators disputed the account, citing contradictory statements and laundering routes that differed from last year’s hack.", "current_state_zh": "该约 1600 万美元的 CoinDCX 可疑资金外流事件已从 Salus 的初步疑似被盗报告，发展为 CoinDCX 承认旧钱包资金因归集失败形成运营损失、但否认误导，并与链上调查人员就地址归属和资金性质存在公开争议。", "current_state_en": "The roughly $16 million CoinDCX suspicious outflow has moved from Salus’s initial suspected-theft report to a public dispute: CoinDCX acknowledges operational losses from failed sweeping of old compromised wallets while denying misleading statements, and blockchain investigators contest its account of address ownership and fund movement.", "detailed_summary_zh": "Blockchain investigators accused CoinDCX of misrepresenting $16M in suspicious on-chain transfers, while the exchange said the wallets were old addresses compromised in July 2025 and no longer in use.", "detailed_summary_en": "Blockchain investigators accused CoinDCX of misrepresenting $16M in suspicious on-chain transfers, while the exchange said the wallets were old addresses compromised in July 2025 and no longer in use.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 7.5, "references": [], "confidence": 0.96, "story_ids": [ "rss:protos.com_feed_:c00cc6f4f9a5e1f9" ], "sources": [ { "url": "https://protos.com/crypto-exchange-coindcx-lying-about-16m-hack-say-blockchain-investigators/", "label": "Protos", "source_type": "rss", "official": false } ] } ] }