CoinDCX wallet breach: $16M ops loss, users made whole

CoinDCX, one of India's larger centralized exchanges, disclosed that a wallet compromise resulted in approximately $16 million in unauthorized outflows. The exchange described the incident as stemming from a failed transfer process involving compromised wallets. CoinDCX confirmed it absorbed the losses from operational reserves and credited all affected user accounts in full. No user funds were permanently lost.

The disclosure came after on-chain observers flagged suspicious outflows, prompting CoinDCX to go public with the incident. The timing and sequencing, scrutiny first then disclosure, is a pattern seen in several prior exchange incidents across the region.

The $16 million figure is material but not existential for an exchange of CoinDCX's size. The more significant data point is process: a transfer workflow was compromised at the wallet level, which points to either key management failure, insider exposure, or a compromise in the signing infrastructure. None of those root causes are unique to CoinDCX.