CoinDCX Hit by $44 Million Cyberattack, Calls for Collaboration to Combat Cyberthreats

Strategic Insights -

In a sudden and severe cyberattack, crypto exchange CoinDCX was targeted, resulting in the loss of approximately $44 million (Rs 380 crore) from one of the company's internal accounts. The incident has highlighted the vulnerabilities of the crypto industry, emphasizing the need for robust security measures and collaboration to combat cyber threats. The company's co-founder, Neeraj Khandelwal, announced the breach on social media, assuring users that customer funds remained safe. An internal operational account used for managing liquidity on a partner platform was compromised due to a sophisticated breach in CoinDCX's server system.

Key Takeaways:

  • CoinDCX suffered a cyberattack, resulting in a loss of approximately $44 million (Rs 380 crore) from an internal account.
  • The attack was due to a sophisticated breach in CoinDCX's server system, and the company's team acted quickly to isolate the affected account.
  • Cybersecurity experts have been brought in to investigate the breach, identify vulnerabilities, and track the stolen funds.
  • CoinDCX plans to launch a bug bounty program to recover lost assets and has collaborated with the exchange partner to block and recover assets.
  • No customer funds were impacted, and regular trading and INR withdrawals are functioning as usual.
  • CoinDCX has paused trading in the Web3 section as a safety measure.
  • This incident highlights the vulnerability of the crypto industry to cyber threats and emphasizes the need for robust security measures and collaboration.
  • The attack marks the second major crypto incident in India in a year, following WazirX's $234 million hack in July 2024.

Statistics:

  • The total amount lost in the cyberattack was approximately $44 million (Rs 380 crore).
  • CoinDCX plans to launch a bug bounty program to recover lost assets.
  • Close to $3 million of the $234 million hacked from WazirX has been recovered.
  • The WazirX hack was linked to North Korean state-backed hackers.

Sources:

  • "Hackers steal ~$44Mn from CoinDCX" (CoinDCX official statement on X)
  • "CoinDCX Treasury will be bearing these losses" (Neeraj Khandelwal, co-founder, CoinDCX, on X)
  • "What happened?" (Sumit Gupta, CEO, CoinDCX, quoted statement)
  • "Every security incident is a learning, and we will learn from this and further strengthen our platform" (Sumit Gupta, CEO, CoinDCX, quoted statement)
  • "Second major crypto attack in India in a year" (Referenced in the original article)
  • WazirX official statement on the 2024 hack and subsequent investigations (IE Online Media Services Pvt. Ltd.)