CoinDCX USDT drain (2026-10-21) follow-up 2: 7 more Tron wallets downstream of TMav76 that received drained USDT
- Scam type: Hack
- Chain: Tron
- Project or site name: CoinDCX
- Incident date: 2026-10-21
- Reported: 2026-10-25
- Last updated: 2026-10-25
Follow-up to our reports on the 2026-10-21 CoinDCX USDT drain on Tron (https://blockint.ai/c3?report=7acd9fd2-0107-40ba-bca2-91e74bea4df7 and https://blockint.ai/c3?report=1ea5beef-2942-4db9-9892-76406cdf4c6e). The second report listed TMav76...WdDc, which received 265,810 USDT of the drained funds from the later-frozen TLG1Do... before Tether's freeze. This report adds the next hops: TMav76... sent 252,280 USDT to a newly activated wallet, which sent it on to seven wallets, and 12,679 USDT to one other wallet. We list seven wallets: the new wallet, three of its seven recipients, two wallets…
Other addresses in this report: TUXjM62Ec9cvNfvUWcCAMTaZeQHCJmHrgW, TT3HjhBWac2CLFoSp6th5zWESXmFrkLfLf, TCBRsUzYnyPuX5dbo8CoPWUiqbG2PoUw5V, TP32ErmvrKgRnRQAHKr4H6RZAWKgR5H76s, TVnuNzeDaZJ77AyrdXMbxaZajYPjsNskEg, TK59rvUAH3yeJ3Q5pwBuzAzdCBYQtotUfc
Linked reports: CoinDCX: about $16M USDT moved from its old Tron deposit addresses to TAg6SZ1Hhg... on 2026-10-21; researchers say part reached Binance, OKX and Gate, CoinDCX USDT drain (2026-10-21) follow-up: 9 Tron addresses Tether froze on 2026-10-22 (~2.21M USDT) and 13 wallets that received the drained funds