India's largest crypto exchange has now disclosed a 15.99M USDT loss tied to deposit wallets it had retired after its July 2025 breach, which cost the exchange $44M. Unusual activity on that legacy infrastructure was detected on October 21.

The automated service that sweeps funds out of old addresses failed for a period of time, so deposits users kept sending to the deprecated Tron addresses piled up and were drained. CoinDCX says it will absorb the full loss, customer funds sit in segregated cold wallets and active trading systems were not affected.

The admission came days after CEO Sumit Gupta called early breach reports "a possible false alarm" on X.

On-chain investigator ZachXBT disputes the retired-wallet explanation, pointing to an affected deposit address that kept sweeping user funds to the exchange's current hot wallet as recently as April and May 2026.