CoinDCX Software Engineer Arrested in Connection to $44 Million Hack (Report)

The Indian trade is the most recent sufferer of unhealthy actors exploiting vulnerabilities and taking management of inside programs, leading to thousands and thousands of {dollars} being misplaced.

The losses this 12 months, general, are already within the billions, and, regrettably, proceed to extend at an alarming tempo.

Particulars on What Occurred

A neighborhood Indian information outlet, The Instances of India, shared the story about Rahul Agarwal, a workers member of the CoinDCX trade, whose login data was compromised. He has been taken into custody by Bengaluru authorities, reportedly linked to a ₹379-crore ($44 million) exploit of funds.

The alarm was raised following a grievance by Nebilo Applied sciences, the corporate that runs the trade. Their Vice President for public coverage, Hardeep Singh, said the next:

“Rahul had a everlasting function throughout the firm, and he was supplied with a laptop computer strictly for work. Our investigation started after we found that an unknown particular person had gained unauthorized entry to our programs on July nineteenth, round 2:30 am, by transferring 1 USDT to an exterior pockets. A number of hours later, round 9:30 a.m., the $44 million was siphoned off and distributed amongst six wallets.

Throughout his questioning by the police, Agarwal maintained his harmless stance, claiming he knew nothing in regards to the hack. Nonetheless, he did admit to “moonlighting” (working a second job exterior common enterprise hours) with three to 4 non-public events, with out totally vetting them. 

It’s additional famous that the accused obtained ₹15 lakh (~$17,000) in his private checking account from an unknown supply. The Bengaluru police additionally level out that Agarwal claimed to have obtained a telephone name from a German telephone quantity, stating he “had a couple of recordsdata to finish.” 

He believes a type of recordsdata was fitted with malware, which granted the attackers entry to CoinDCX’s inside programs, and he remained adamant that he was unaware of what was occurring till the corporate summoned him.

The trade’s founder and CEO, Sumit Gupta, shared the bitter information of the assault on X, calling it a “refined social engineering assault,” however with out having the ability to disclose any additional data on what had transpired.

Some media studies have surfaced referencing the FIR we filed with the Karnataka Police relating to the safety incident that impacted our platform.

As that is an ongoing investigation, we sadly can’t interact with the media or public on this challenge. We need to make sure the…

— Sumit Gupta (CoinDCX) (@smtgpt) July 31, 2025

Hefty Losses

Sadly, the assaults on crypto exchanges are on the rise, growing in complexity, and the injury to their coffers is important.

Probably the most notable instance is the hack on Bybit in February, which resulted in a $1.5 billion loss, linked to the North Korean Lazarus Group.

General, 2025 has seen monumental quantities of funds stolen, topping information from earlier years solely through the first half of the 12 months.

These incidents serve for example of how geopolitical tensions, cybersecurity vulnerabilities, and complicated adversaries proceed to pose a major danger to even well-established cryptocurrency platforms.