CoinDCX Confirms $15.99M Loss From Compromised Retired Wallets

CoinDCX has confirmed a $15.99 million loss tied to compromised retired wallet infrastructure, saying the affected system had been decommissioned but was still exposed through wallet activity linked to past operations. The exchange said the loss was absorbed by the company and did not affect customer balances.

In an official blog post, CoinDCX said the incident involved a legacy wallet system that had previously been compromised and later retired. According to the exchange, the issue surfaced through an automated sweeping process that continued handling deposits sent to old addresses, allowing funds to accumulate in infrastructure that should no longer have been active.

The company described the loss as an operational one rather than a breach of its current trading or wallet systems. It said user funds remained secured in cold wallets and that deposits, withdrawals and trading were not affected on the exchange’s active platform.

Legacy infrastructure became the exposure point

The sequence CoinDCX described points to a narrow but important failure mode: retired wallet infrastructure was still reachable through deposit flows, and the exchange’s internal wallet-moving process did not prevent assets from building up there. That distinction matters because the loss did not stem from the live trading engine, but from wallet management around an outdated address set.

CoinDCX has not indicated that customer funds were taken from active wallets. Instead, it framed the loss as part of the cleanup and maintenance burden left behind by older wallet infrastructure. The company said the affected system had already been phased out, but the operational process around it was still involved in moving deposits.

For users, the practical takeaway is limited to the exchange’s own admission of the loss and its statement that core services remained unaffected. For the broader market, the incident adds another example of how retired wallet infrastructure can remain a security and operational risk if deposits continue flowing into addresses that are no longer meant to be active.