Coinsbuy
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·2vufah…39BsSummary
Coinsbuy (coinsbuy.com) is a B2B cryptocurrency payments platform and exchange incorporated in Saint Vincent and the Grenadines, with reported operational presence in Panama. On August 9, 2026, wallets linked to the platform were drained of approximately $7.9–8.07 million across Ethereum and TRON networks in a coordinated cross-chain attack. The company stated that all affected client funds were covered from its own reserves, though the attack vector remained publicly unconfirmed as of mid-August 2026.
Connected Entities
7 entities · 60 linked investigations- TVpX9x…ubGR→mentioned with→Coinsbuy(50%)
- Coinsbuy→mentioned with→ChangeNOW(70%)
- Coinsbuy→mentioned with→Ethereum(70%)
- Coinsbuy→mentioned with→Monero(80%)
- ChangeNOW→mentioned with→Monero(70%)
- ChangeNOW→mentioned with→Ethereum(65%)
- Coinsbuy→mentioned with→FixedFloat(80%)
- ChangeNOW→mentioned with→FixedFloat(70%)
- ChangeNOW→mentioned with→Coinsbuy(70%)
- Cointelegraph→mentioned with→Ethereum(60%)
- + 2 more
7 submissions awaiting moderator review.
Timeline(6 events)
2019
Coinsbuy reportedly founded (approximate year; exact date not confirmed in public sources).
Crunchbase9 August 2026
Wallets linked to Coinsbuy drained of approximately $8.07 million across TRON (6.04M USDT from 8 wallets) and Ethereum (1.89M USDT + 77 ETH from 3 wallets) beginning around 13:00 UTC. Attack initiated with a 5 USDT test transaction. Blockchain investigator SpecterAnalyst first flagged the incident on Telegram.
CoinDesk, CoinTelegraph, Decrypt9 August 2026
Coinsbuy temporarily suspends deposits and withdrawals following the breach. Attacker routes ~79% of funds through FixedFloat using ~50 single-use addresses; additional routing via ChangeNOW and BingX. Proceeds converted to Monero.
Crypto Briefing, CryptoTimes9 August 2026
ChangeNOW freezes a six-figure portion of stolen assets during the laundering process. Approximately $542,000 in ETH remains unmoved across five addresses.
CoinDesk10 August 2026
Multiple crypto news outlets including CoinDesk, Decrypt, CoinTelegraph, and Crypto.news publish reports on the breach. PeckShield and GoPlus Security publicly share on-chain analysis and suspected theft addresses.
CoinDesk, Decrypt, CoinTelegraph11 August 2026
Coinsbuy issues public statement confirming the breach, stating all affected client funds have been covered from company reserves. Company offers a $100,000 reward for information identifying perpetrators.
CoinTelegraphDecision Log
- slot 443515974 · hash J9fRn2vNMLVxv9DqAx7nXsF17mfdvbAkUVSx7TgGLKd3
- slot 443515970 · hash 2wxMJZg2hdbHJ8c1EUriFRfSykPAw8r4ox7mBniBgbcE
- slot 443506979 · hash EcDpcN8UfrxP7mZ5hRxKBPb4JKjP4NGBm3KGngx8dTmw
This investigation is cryptographically anchored to the Solana blockchain (3 decisions). 14 of 16 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 8/11/2026, 12:04:11 PM
last updated: 8/25/2026, 6:58:38 PM
4 viewsavoid.net — verified advice for a post-truth world