---
title: CoinDCX confirms a 15.99M USDT loss from deprecated wallets compromised in its July 2025 hack; a failed sweep let deposits pile up, and the exchange absorbed the loss | ctxsec
url: https://ctxsec.com/items/coindcx-deprecated-wallet-sweep-16m-oct-2026
description: ""
status: "confirmed by the exchange (CoinDCX blog update, Oct 25); attack method on the deprecated wallets not disclosed, last updated Oct 25, 2026, 11:55 PM ET"
published: 2026-10-25
updated: 2026-10-25T23:55:00-04:00
---

> 

[← Cybersecurity News](/news) · [markdown](/items/coindcx-deprecated-wallet-sweep-16m-oct-2026.md)

confirmed by the exchange (CoinDCX blog update, Oct 25); attack method on the deprecated wallets not disclosed

2026-10-25 · updated

Oct 25, 2026, 11:55 PM ET

### CoinDCX confirms a 15.99M USDT loss from deprecated wallets compromised in its July 2025 hack; a failed sweep let deposits pile up, and the exchange absorbed the loss

In an Oct 25 update, Indian exchange CoinDCX says it noticed "unusual activity" in its systems on Oct 21. The next day, on-chain data and user reports showed funds moving out of its old operational wallet infrastructure (the `TQKJQ` wallet). That infrastructure was compromised in the hack CoinDCX reported on July 19, 2025 and later deprecated. CoinDCX says this old infrastructure "had unknown vulnerabilities". Users kept depositing to the deprecated addresses, and the automated service that sweeps those deposits into current wallets had failed for a period. The result was a **loss of 15.99 million USDT, absorbed by the company**. Affected users' deposits had already been credited.

CoinDCX says active wallets, trading and withdrawals were not affected and user assets are held in segregated cold wallets. It first called the reports "misleading" on Oct 22, and acknowledges it "could have been more proactive". It has not said how the funds were taken from the deprecated wallets.

Lesson: retiring compromised wallets isn't enough while users can still deposit to them. Keep sweeping and monitoring old addresses for as long as funds can arrive, and alert when a sweep fails.

Sources: [CoinDCX: Update on the on-chain Wallet Activity, 21st October 2026 (Oct 25)](https://coindcx.com/blog/coindcx-news/on-chain-wallet-activity-update-21-oct-2026) · [CoinDCX on X: further update on TQKJQ wallet activity (Oct 22)](https://x.com/CoinDCX/status/2113235810988531883)