CoinDCX Admits $16M USDT Deposit-Sweeping Failure

CoinDCX acknowledged failures in its deposit-sweeping process after nearly $16 million in USDT moved from wallets linked to the Indian crypto exchange. The transfers included about 15.99 million USDT and 5,784 TRX, with blockchain analytics firm Bitquery identifying roughly 40 affected wallets. About $9.63 million had reached identified exchange deposit addresses by October 22. The admission reversed CoinDCX’s initial claim that the addresses had been abandoned after a $44 million security breach in July 2025. Blockchain investigator ZachXBT challenged that account, citing evidence that deposits continued reaching at least one address. CoinDCX said users who deposited to the deprecated addresses were credited, the company absorbed the operational losses and its active custody infrastructure remains secure. Trading services continue normally. The exchange has not disclosed a full reconciliation of affected balances, final losses or recovery efforts. The incident renews scrutiny of centralized exchange custody and operational controls in India.
Bearish
The news is bearish for confidence in centralized crypto exchanges, particularly in India, rather than a direct negative catalyst for the broader crypto market. The movement of nearly $16 million in USDT from CoinDCX-linked wallets, combined with the exchange’s admission that deposit sweeping had failed, raises concerns about wallet management, operational controls and the transparency of its initial response. ZachXBT’s public challenge may further increase scrutiny from customers and traders. In the short term, users may withdraw funds or reduce activity on CoinDCX while seeking clarification. That could increase exchange outflows and pressure confidence in the platform, although CoinDCX says affected users were credited, company funds absorbed the losses, active custody infrastructure is safe and trading continues normally. The reported transfers to Binance, OKX and Gate do not by themselves establish that those exchanges were involved in the incident. The longer-term effect depends on whether CoinDCX publishes a verifiable accounting, explains recovery efforts and demonstrates stronger controls over deprecated deposit addresses. Similar exchange security incidents, including the WazirX breach cited in the article, have shown that unclear communications and prolonged repayment uncertainty can weigh on customer trust and increase regulatory and custody concerns. There is no evidence here of a broad market contagion or compromise of major crypto networks, so spillover to prices such as BTC or ETH may be limited unless the incident expands or undermines wider confidence in exchange solvency.