"False alarm," says the exchange. The blockchain disagrees. India's largest cr… · @sunkaixuan1718 · TwKit
@sunkaixuan1718
"False alarm," says the exchange. The blockchain disagrees. India's largest crypto exchange CoinDCX is denying a hack after on-chain sleuths flagged about $16 million in suspicious outflows (USDT + TRX) — the largest single transfer at 15,819,002 USDT — funneled into one Tron address, then split across multiple wallets. CoinDCX's version: those were old addresses created in January 2025, compromised in the July 2025 hack (when the exchange lost about $44M). Hackers are reusing them now. CEO Sumit Gupta called it a false alarm; current wallets untouched. ZachXBT's receipts: one of those "abandoned" addresses — labeled TQKJQ — was still used by a liquidity provider for 10 months after the hack, sweeping user deposits into CoinDCX's current hot wallet as recently as April and May 2026. The twist: CoinDCX then admitted its deposit-sweeping process for retired addresses broke down for a period, causing "operational losses" — quietly absorbed after crediting affected users. So was this a hacker's second heist, or an exchange that lost track of its own wallets and only confessed when the on-chain receipts went public? Do you trust the exchange's word — or the blockchain's ledger? "误报,"交易所说。但区块链不同意。 印度最大加密交易所 CoinDCX 被链上侦探抓包约 1600 万美元可疑外流(USDT+TRX),其中最大单笔 15,819,002 USDT——资金先汇入同一个 Tron 地址,再被拆分进多个钱包。 CoinDCX 的版本:那是 2025 年 1 月建的老地址,同年 7 月(交易所被黑约 4400 万美元那次)就被盗了,现在是黑客复用。CEO Sumit Gupta 称这是"误报",当前钱包没事。 ZachXBT 的铁证:其中一个所谓"已废弃"的地址 TQKJQ,被黑事件后还被一个做市商用了 10 个月,2026 年 4、5 月还在往 CoinDCX 当前的热钱包归集用户存款。 反转来了:CoinDCX 随后承认,废弃地址的存款归集流程确实出过一段故障,造成"运营损失"——给受影响用户赔付后,自己默默认了这笔账。 所以——这是黑客的二次洗劫,还是交易所自己弄丢了钱包、等链上证据曝光才认错? 你信交易所的嘴,还是信区块链的账? #CoinDCX #印度交易所 #ExchangeSecurity #交易所安全 #ZachXBT #链上侦探 #CryptoNews #加密新闻
曝光 72 · 评论 1 · 点赞 0 · 书签 0
查看原帖