Wallets tied to crypto payment provider Coinsbuy were drained of roughly $7.9M in an exploit spanning both TRON and Ethereum on Aug 9, according to security firm Specter and flagged by PeckShield.

The attacker is now converting the stolen funds into Monero (XMR) to bury the trail. Coinsbuy says it froze a six-figure sum with help from ChangeNOW and briefly paused deposits and withdrawals, both since resumed. GoPlus Security assessed the breach as consistent with a hot-wallet private-key or admin-access compromise.

Coinsbuy has not yet published a technical postmortem or named the attack vector; its last release notes predate the incident.