Coinsbuy
Summary
Coinsbuy (coinsbuy.com) is a B2B cryptocurrency payments platform and exchange incorporated in Saint Vincent and the Grenadines, with reported operational presence in Panama. On August 9, 2026, wallets linked to the platform were drained of approximately $7.9–8.07 million across Ethereum and TRON networks in a coordinated cross-chain attack. The company stated that all affected client funds were covered from its own reserves, though the attack vector remained publicly unconfirmed as of mid-August 2026.
Connected Entities
2 entities- TVpX9xCzrj6KHeNhhDJoqjzEqFMxdgubGR→mentioned with→Coinsbuy(50%)
Timeline(6 events)
2019-01-01
Coinsbuy reportedly founded (approximate year; exact date not confirmed in public sources).
Crunchbase2026-08-09
Wallets linked to Coinsbuy drained of approximately $8.07 million across TRON (6.04M USDT from 8 wallets) and Ethereum (1.89M USDT + 77 ETH from 3 wallets) beginning around 13:00 UTC. Attack initiated with a 5 USDT test transaction. Blockchain investigator SpecterAnalyst first flagged the incident on Telegram.
CoinDesk, CoinTelegraph, Decrypt2026-08-09
Coinsbuy temporarily suspends deposits and withdrawals following the breach. Attacker routes ~79% of funds through FixedFloat using ~50 single-use addresses; additional routing via ChangeNOW and BingX. Proceeds converted to Monero.
Crypto Briefing, CryptoTimes2026-08-09
ChangeNOW freezes a six-figure portion of stolen assets during the laundering process. Approximately $542,000 in ETH remains unmoved across five addresses.
CoinDesk2026-08-10
Multiple crypto news outlets including CoinDesk, Decrypt, CoinTelegraph, and Crypto.news publish reports on the breach. PeckShield and GoPlus Security publicly share on-chain analysis and suspected theft addresses.
CoinDesk, Decrypt, CoinTelegraph2026-08-11
Coinsbuy issues public statement confirming the breach, stating all affected client funds have been covered from company reserves. Company offers a $100,000 reward for information identifying perpetrators.
CoinTelegraphDecision Log
- #1publish⛓ pending8/11/2026, 12:04:29 PMhash: EcDpcN8UfrxP7mZ5hRxKBPb4JKjP4NGBm3KGngx8dTmw
14 of 16 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 8/11/2026, 12:04:11 PM
last updated: 8/12/2026, 5:55:28 AM
avoid.net — verified advice for a post-truth world