Indian crypto exchange CoinDCX absorbed a $15.99 million USDT loss after attackers compromised a legacy wallet address generated in January 2025 and abandoned following a security incident in July of the same year. The funds accumulated because an automatic sweeping service was temporarily out of operation, causing some user deposits to be mistakenly sent to the inactive address before being drained on October 21. CoinDCX confirmed that all affected users' deposits have been credited back to their accounts normally. The exchange stated that active centralized wallets and user wallets were not impacted, with customer assets remaining in separate cold storage. Trading and withdrawal services continue operating as usual.