CoinDCX suffers $44 million hack, says customer funds are safe: All you need to know

CoinDCX, a leading cryptocurrency exchange in India, has reported a significant cyberattack resulting in a loss of $44 million from one of its internal accounts. This incident, which took place on July 19, marks the second notable hack of an Indian crypto exchange within a year, following the notorious WazirX breach earlier in 2024. According to cofounders Sumit Gupta and Neeraj Khandelwal, the attackers exploited a vulnerability in the server-side architecture of an internal liquidity provisioning account. This account is crucial for maintaining crypto reserves, ensuring smoother transactions on the platform. CoinDCX described the attack as a "sophisticated" breach of its systems. In a reassuring update, the company emphasized that customer assets were not affected by the breach. "User funds are stored in secure cold wallets and remain unaffected," CoinDCX stated. To mitigate the situation, the exchange has temporarily suspended its Web3 services while ensuring that centralized trading, INR deposits, and withdrawals continue to operate normally. CoinDCX has pledged to absorb the entire loss from its own treasury. The firm’s internal security team is collaborating with external cybersecurity experts to investigate the breach and recover the stolen assets. They are also working with a partner exchange to freeze any illicit transactions and are planning to implement a bug bounty program to enhance their security measures moving forward. The incident has caused a wave of anxiety among users, leading many to seek updates on social media. This surge in traffic resulted in temporary issues for CoinDCX’s servers, particularly affecting its portfolio services. In response, the exchange has increased server capacity to better handle the demand. Founded in 2018, CoinDCX has rapidly become one of India's largest cryptocurrency exchanges, achieving unicorn status in 2021 with a valuation of approximately $2.3 billion. The exchange offers a range of services, including a user-friendly investment app, CoinDCX Pro for seasoned traders, and CoinDCX Earn for generating passive income from holdings. Additionally, it operates CoinDCX Ventures, which invests in early-stage blockchain startups. The latest breach echoes the infamous WazirX hack, where over $230 million was stolen due to vulnerabilities in a multisignature wallet, an attack that was later connected to North Korean hacking groups like the Lazarus Group. Although cryptocurrency trading is legal in India, the sector continues to face challenges, including a lack of comprehensive regulatory oversight. Recent tax measures and anti-money laundering compliance issues have further complicated the trading landscape.