CoinDCX experienced operational losses on October 22, 2026, after a routine process to sweep crypto deposits landing on wallet addresses deprecated following CoinDCX's July 2025 hack failed

Overview Debates Related claims Topics Sources

Uniswap founder Hayden Adams and Paradigm's Dan Robinson rejected 0x's September findings on malicious Uniswap v4 hooks, arguing that aggregators and routers are responsible for vetting and screening which hooks they route trades through

0x engineer Duncan Townsend stated that 0x used Uniswap's allowlist and alleged that at least one malicious hook was included on the allowlist

A September 14, 2026 study by trading aggregator 0x examining 84,163 hooks across six chains classified 54.2% as malicious and 26.4% as likely malicious due to quote-versus-execution price disparities

On-chain investigator ZachXBT alleged on October 22, 2026, that a CoinDCX-linked address TQKJQ swept user deposits into CoinDCX active hot wallet in April and May 2026, leaving $15.8 million unaccounted for

CoinDCX co-founder Sumit Gupta stated on October 22, 2026, that flagged wallet addresses, including TQKJQ, dated to January 2025 and were compromised during CoinDCX's July 2025 hack, characterizing reports of a new breach involving TQKJQ as a false alarm

Hackers drained approximately $44 million from an internal CoinDCX account in July 2025, prompting the Indian crypto exchange to deprecate compromised wallet addresses and warn users against depositing to them

CoinDCX credited user accounts that sent deposits to deprecated wallet addresses following CoinDCX's July 2025 breach and absorbed the resulting operational losses

CoinDCX identified a breakdown in its deposit sweep system on the morning of October 22, 2026, but did not disclose how long the sweep was down or how many users were affected

CoinDCX has not stated whether it will continue to credit user deposits sent to wallet addresses deprecated after CoinDCX's July 2025 breach in the future

CoinDCX co-founder Sumit Gupta assured users on October 22, 2026, that no customer funds would be lost, confirming active customer assets sit in segregated cold wallets

CoinDCX advised users to verify deposit addresses on its official application or website, cautioning that crypto exchanges typically do not assume liability for deposits sent to retired addresses

Initia halted its Layer 1 blockchain and interwoven rollups on October 23, 2026, following an unauthorized minting incident

Blockchain security researcher Spreek publicly flagged the unauthorized minting activity on Initia on October 23, 2026, which was confirmed via transactions on the official Initia explorer

Initia co-founder Ezaan Mangalji stated preliminary findings from Initia's investigation point to a previously unknown Day 0 bug in the network's MoveVM implementation on Cosmos SDK that enabled unauthorized token minting, which did not apply to native INIT tokens

Initia co-founder Ezaan Mangalji reported an attacker minted and bridged out approximately $2.7 million worth of AUSD, ETH, and USDC prior to Initia's network pause

On October 23, 2026, an unauthorized attacker executed an infinimint exploit on the Initia blockchain, minting uncapped tokens and swapping them for external assets

Initia completed multiple security audits prior to the October 23, 2026 Initia exploit, having previously resolved a 2025 INIT staking reward configuration error through governance

Initia raised approximately $24 million in funding from venture capital investors including Binance Labs and Delphi Digital prior to an October 23, 2026 exploit

Initia announced it is investigating the extent of an October 23, 2026 security incident alongside security teams, network validators, and cryptocurrency exchanges

Webull announced on October 20, 2026, that it will launch Bitcoin and selected crypto perpetual futures to eligible U.S. customers in November 2026