The Indian exchange says deprecated wallets, not its active infrastructure, were involved in the incident.
CoinDCX, one of India's largest cryptocurrency exchanges, has confirmed that a number of users experienced losses connected to deposits made to old wallet addresses. The exchange says these addresses had been phased out of active use but remained technically reachable, creating a gap that some deposits fell into.
According to reporting from CryptoSlate and Inc42, the exchange has characterized the situation as distinct from a security breach. CoinDCX maintains that its current, actively monitored wallet infrastructure was not compromised. The company's position is that the losses stem from deposits routed to deprecated addresses rather than any unauthorized access to live systems.
Wallet address rotation is a routine practice across the crypto exchange industry. Platforms periodically retire old deposit addresses and issue new ones for operational, security, or custody-management reasons. Problems arise when users, third-party platforms, or automated systems continue sending funds to addresses that are no longer tracked or swept into active custody.
When that happens, funds can become stranded or effectively lost, even though no hacker or external attacker was involved. The distinction matters for how an exchange communicates with affected users, and for how regulators and the public interpret the incident.
CoinDCX operates under scrutiny from Indian regulators and users who have grown more attentive to custody practices following a string of high-profile exchange failures and hacks globally in recent years. Any mention of lost funds, regardless of cause, tends to draw immediate concern in a market where trust in centralized custodians remains a central issue.
The exchange's denial of a breach of active wallets is an attempt to separate this episode from more severe categories of incident, such as a hack or an insider compromise. Whether affected users will be compensated, and through what process, has not been detailed in available reporting. The scope of the losses, including the number of users affected and the total value involved, also remains unclear from the information reported so far.
This type of incident underscores a persistent operational risk in crypto custody: the mismatch between address lifecycle management on the exchange side and user behavior on the deposit side. Exchanges often rely on automated systems to generate and retire addresses, while users and integrated platforms may cache old addresses for extended periods. Closing that gap requires clear communication, deposit monitoring, and sometimes manual intervention when stale addresses receive unexpected transfers.
Market Impact
For CoinDCX, the immediate impact is reputational rather than systemic. Confirmed user losses, even when attributed to address management rather than a breach, can affect confidence among retail users who already weigh custody risk heavily when choosing an exchange.
More broadly, the episode is likely to renew attention on how exchanges handle wallet address retirement and deposit monitoring. Other platforms may face pressure to review their own address lifecycle processes to avoid similar incidents, particularly in markets like India where user bases and transaction volumes continue to grow.
CoinDCX's acknowledgment of losses tied to old wallet addresses, paired with its denial of a breach, highlights how custody missteps can carry real consequences without involving external attackers. Further details on the scale of losses and any remediation plan are expected to shape how the incident is ultimately judged.
Frequently Asked Questions
What exactly happened with CoinDCX's wallet addresses?
CoinDCX says some users sent deposits to wallet addresses the exchange had stopped actively using, resulting in losses for those users.
Was CoinDCX hacked?
CoinDCX denies that its active wallets were breached, distinguishing this incident from a security hack or unauthorized access.
How many users were affected and how much was lost?
Available reporting does not specify the number of affected users or the total value of the losses.
Will affected CoinDCX users be compensated?
No compensation plan or remediation process has been detailed in reporting on the incident so far.
Why do exchanges retire old wallet addresses?
Exchanges periodically rotate deposit addresses for operational and custody-management reasons, which can create risks if users or platforms keep sending funds to outdated addresses.
