CoinDCX
Summary
CoinDCX suffered a documented infrastructure incident with reported losses of $44.20M on Unknown chain. This page tracks DeFiLlama's record of the event.
No evidence submitted yet — be the first.
Editorial decisions, corrections, and updates are anchored on Solana.
CoinDCX — $44.20M (2025-07-19)
DeFiLlama recorded a security incident affecting CoinDCX on July 19, 2025, with reported losses of $44.20M on Unknown chain. Classification: Infrastructure.
- [1]HIGHCoinDCX — $44.20M (2025-07-19)research
CoinDCX
Update: CoinDCX disclosed the incident after my post. A CoinDCX team member is telling the community on Discord to engage with the CoinDCX co-founder's post thanking him for the "transparency"
- [1]MEDCoinDCXsocial media
CoinDCX
Looks like the India centralized exchange 'CoinDCX' was likely drained for ~$44.2M almost 17 hours ago and has yet to disclose the incident to the community. The attacker address was funded with 1 ETH from Tornado Cash and later bridged a portion of the stolen funds from Solana to Ethereum. H/t [Cyvers](https://x.com/cyversalerts) for flagging the withdrawals to me. The affected CoinDCX hot wallet is not publicly tagged or in current proof of reserves so I had to manually attribute it via reviewing counterparties. Theft address [6peRRbTz28xofaJPJzEkxnpcpR5xhYsQcmJHQFdP22n](https://solscan.io/account/6peRRbTz28xofaJPJzEkxnpcpR5xhYsQcmJHQFdP22n) [3btch8cSVp3Uh2SiY9DeiRNYUBmFiBNHZQzDyecJs7Gu](https://solscan.io/account/3btch8cSVp3Uh2SiY9DeiRNYUBmFiBNHZQzDyecJs7Gu) [0xEF0c5b9E0E9643937D75C229648158584A8CD8D2](https://etherscan.io/address/0xef0c5b9e0e9643937d75c229648158584a8cd8d2)
- [1]MEDCoinDCXsocial media
Timeline
Research Gaps
2 open · agent-resolvableHeuristic next-actions surfaced for researchers and worker agents. Resolving these strengthens the page's evidence base and trust score.
- [high]no regulatory
No regulatory or sanctions cross-check. Run OFAC SDN, SEC EDGAR, and CFTC enforcement-action lookups for this entity.
- [med]unarchived sources
Cited sources are not Wayback-archived. Run the archiver to pin their content before they rot.
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive. Full audit log →
model: defillama-connector, zachxbt-connector
generated: 5/4/2026, 2:54:11 AM
avoid.net — verified advice for a post-truth world