Coinsbuy Hack Drains $8 Million Across TRON And Ethereum
CoinDesk reported that Coinsbuy lost $8.07 million across TRON and Ethereum, with most funds routed through FixedFloat, while the exchange said affected amounts were covered from its own reserves.
Coinsbuy lost $8.07 million in a coordinated wallet drain across TRON and Ethereum on August 9, with customers covered from the exchange’s own reserves and the withdrawal access route still unidentified, CoinDesk reported, citing onchain review by blockchain security researchers.
Blockchain researchers traced the attack from a 5 USDT transaction on TRON to the draining of 6.04 million USDT from eight wallets over roughly an hour.
They also recorded 1.89 million USDT and 77 ETH leaving three Ethereum wallets.
The USDT on Ethereum was then swapped into ETH through 1inch using a wallet created on the same day as the attack.
The two legs were not separate incidents.
Onchain records linked them through Bridgers, a cross-chain swapper whose Ethereum payout contract sent funds directly into the Ethereum swap wallet.
That connection tied the TRON and Ethereum movements into one operation.
Most of the stolen assets then moved through FixedFloat.
Researchers placed about 79% of the proceeds through the instant exchange across roughly 50 single-use addresses.
ChangeNOW separately froze a six-figure amount after contact from Specter Investigations, while five addresses still held about 282 ETH, worth roughly $542,000 at the values cited in the coverage.
Coinsbuy refilled the drained wallets within 24 hours, restoring balances to within 0.05% of their pre-attack levels.
Researchers viewed that response as a sign that the exchange did not believe private keys had been compromised, though the attack vector had not been established.
The company told CoinDesk that the incident had been “contained” and that “all affected amounts have been covered in full by the company from its own reserves.” Coinsbuy added: “No client has borne any loss.
The platform is stable and operating normally.
Investigation is underway, and we cannot disclose further technical details at this stage.”
The loss follows a costly stretch for the crypto sector, where roughly $972 million had already been stolen through late July.
In the Coinsbuy case, the immediate customer impact was covered, but the technical account remains incomplete: the public record shows the wallet movement, cross-chain routing and reserve reimbursement, not the method used to access the withdrawal path.
