Incident Report: July 19, 2025
2025-07-20 • Coin DCX •
https://coindcx.com/blog/announcements/incident-report-july-19-2025/
CoinDCX said one internal operational account used for liquidity provisioning on a partner exchange was compromised in a sophisticated server breach on July 19, while customer wallets remained segregated and unaffected. The exchange reported about $44 million in USDT exposure, with proceeds routed through multiple hops before landing in listed Solana and Ethereum wallets. The described fund movement included SOL held in an origin wallet, batching into smaller transfers, swaps to WETH through Jupiter, and bridging to Ethereum via Wormhole. CoinDCX said it isolated the affected account, notified CERT-In, engaged external forensics and blockchain tracing partners, and launched a recovery bounty program.