According to on-chain detectives Darcy and WuBlockchain, Indian crypto exchange CoinDCX allegedly suffered another security breach on October 21. Approximately 15.99 million USDT and 5,784 TRX were transferred from CoinDCX hot wallets and deposit addresses to a TRON address, then diverted to deposit addresses on Binance, OKX, and Gate, totaling about $16 million. CoinDCX co-founder Sumit Gupta denied it was a new attack, stating that the flagged funds originated from "legacy addresses" compromised and abandoned during their $44 million theft incident in July 2025, emphasizing that no active hot wallets were breached.

However, on-chain detective ZachXBT quickly refuted CoinDCX's explanation, providing evidence that the deposit address remained active for 10 months after the July 2025 attack, regularly processing user deposits, and interacted with CoinDCX's current hot wallets in April and May 2026, suggesting that approximately $15.8 million in user deposits are unaccounted for. CoinDCX has not yet provided further comment on this matter.