- Scam type: Hack
- Chains: Tron, EVM
- Project or site name: CoinDCX
- Incident date: 2026-10-21
- Reported: 2026-10-25
- Last updated: 2026-10-25
Follow-up to our reports on the 2026-10-21 CoinDCX USDT drain on Tron (https://blockint.ai/c3?report=7acd9fd2-0107-40ba-bca2-91e74bea4df7 and https://blockint.ai/c3?report=1ea5beef-2942-4db9-9892-76406cdf4c6e). This report follows 70,151 USDT of the drained funds that the Tron wallet TUXjM62Ec9cvNfvUWcCAMTaZeQHCJmHrgW sent to the cross-chain swap service HiFiSwap. In under 70 minutes on 10-22, those funds were swapped to USDT on BNB Chain, paid out to one wallet, and 69,780 USDT then reached a BscScan-labelled Binance deposit address. Tron side (times UTC, 2026-10-22): TUXjM62... sent 70,151…
Other addresses in this report: TUXjM62Ec9cvNfvUWcCAMTaZeQHCJmHrgW, 0x609a793a245ec9e3099cf4ec42f7ae2a40d188bb, 0xd132f6fe4840beca4de7bc10d0a91676d8e5a734, 0x53c9793422bc13f1af670a9f802d1e687f91fabd
Linked reports: CoinDCX: about $16M USDT moved from its old Tron deposit addresses to TAg6SZ1Hhg... on 2026-10-21; researchers say part reached Binance, OKX and Gate, CoinDCX USDT drain (2026-10-21) follow-up: 9 Tron addresses Tether froze on 2026-10-22 (~2.21M USDT) and 13 wallets that received the drained funds, CoinDCX USDT drain (2026-10-21) follow-up 2: 7 more Tron wallets downstream of TMav76 that received drained USDT