💻 CoinDCX Employee Login Breach Triggered ₹379 Cr Crypto Storm — Bengaluru Techie Nabbed

A major cryptocurrency theft worth Rs 379 crore has rocked one of India’s top crypto trading platforms, CoinDCX. Bengaluru police have arrested a software engineer working with the company in connection with the case.

Huge Crypto Theft Shakes CoinDCX

The arrested techie is a 30-year-old who was working as a permanent employee at CoinDCX. The incident came to light when the company reported a suspicious transfer of $44 million worth of digital assets (roughly Rs 379 crore) to multiple unknown wallets.

This massive theft took place in the early hours of July 19. Around 2:37 am, the company noticed a transfer of one USDT (a type of cryptocurrency) to a wallet. By 9:40 am the same day, hackers had transferred the remaining funds to six other wallets.

The company immediately began an internal investigation and found that the hacker had used the login credentials of one of their employees. This login was used to gain access to confidential financial systems.

Hacker Got In Through Techie’s Laptop

Investigators revealed that someone had compromised the employee’s official work laptop. Security teams discovered that the hacker used the laptop’s credentials to breach the company’s crypto systems.

The engineer claimed he had no idea about the theft and that he had not shared his login details with anyone knowingly. However, during questioning by the police, he admitted to working for 3-4 private clients outside of his main job. This practice, known as moonlighting, involves taking up freelance work alongside a full-time job.

🕵️‍♂️ Crypto cloak crumbles — Samourai wallet creators set to plead guilty in explosive bitcoin laundering case

The employee said he had received a WhatsApp call from a German phone number. The caller reportedly asked him to check a few files sent for some technical work. He said he had opened the files, not knowing that one of them might have allowed a hacker to access his system.

Police said this could have been a trap. The file may have contained malware, a type of software that secretly allows someone else to control the computer. Once the hacker was inside the laptop, they likely found a way into the company’s internal systems.

Suspicious Payment and Arrest

Further checks revealed another shocking detail. A sum of Rs 15 lakh was deposited into the techie’s bank account from an unknown source. He told the police he did not know where the money came from.

As the investigation progressed, the police found enough evidence to detain him. The Whitefield CEN Crime Police arrested him on July 26. His laptop was seized for a detailed forensic check.

The complaint was officially made by the company running CoinDCX. As per officials, the employee had access to important systems and was trusted with sensitive financial data. Therefore, the breach using his login raised serious concerns.

Shocking Cyberattack Paralyzes Aeroflot Flights Causing Travel Chaos at Russian Airports

Although the techie insists he had no direct role in the theft, the timing of the login and the external payment have, nevertheless, made him a prime suspect.

In the meantime, the company has not shared any further details about how the hacker moved the stolen cryptocurrency or whether anyone can recover it. At present, cybercrime officials are tracking the wallets where the hacker sent the money.

Overall, the case has highlighted how even a small security slip can lead to huge losses in the world of cryptocurrency. Consequently, it serves as a reminder for all companies to keep their digital assets tightly secured.

Renuka Bangale
Renuka Bangale
Renuka is a distinguished Chartered Accountant and a Certified Digital Threats Analyst from Riskpro, renowned for her expertise in cybersecurity. With a deep understanding of cybercrimes, malware, cyber warfare, and espionage, she has established herself as an authority in the field. Renuka combines her financial acumen with advanced knowledge of digital threats to provide unparalleled insights into the evolving landscape of information security. Her analytical prowess enables her to dissect complex cyber incidents, offering clarity on risks and mitigation strategies. As a key contributor to Newsinterpretation’s information security category, Renuka delivers authoritative articles that educate and inform readers about emerging threats and best practices.

TOP 10 TRENDING ON NEWSINTERPRETATION

Cyber Attacks on Space Infrastructure: Satellites, GPS and the Ground Systems Behind Them

From the Viasat KA-SAT hack to GPS jamming over the Baltic, a research guide to how attackers target satellites, navigation signals and ground stations, and why it matters on Earth.

How AI Agents Are Used in Cyber Attacks: From Assisted Hacking to AI-Orchestrated Espionage

Attackers now use AI agents to scan networks, write exploits and run extortion campaigns. A research guide to documented cases, including the first reported AI-orchestrated espionage campaign, and what defenders should do.

Cyber Attacks on AI and LLMs: How Attackers Target Large Language Models

Prompt injection, data poisoning, model theft and jailbreaks: a research guide to how attackers target AI systems and large language models, with real cases and defences.

French Supermarket Refrigeration Cyberattack: How Hacking the Cold Chain Can Endanger Lives

In October 2026 attackers heated refrigeration cabinets in hundreds of French supermarkets to as much as 50°C. No one was hurt, but the attack shows how hacking the cold chain can endanger lives through fire, food poisoning and spoiled medicines.

Cyberattacks on Nuclear Facilities: Stuxnet, Kudankulam and the Limits of Air Gaps

Stuxnet, the Davis-Besse worm and malware at India’s Kudankulam plant: what they show about cyber risk at nuclear facilities and the limits of air gaps.

Triton: When Hackers Target the Safety Systems That Prevent Industrial Disasters

The 2017 Triton attack targeted the safety systems that prevent industrial disasters. What happened, who was charged, and how plants protect their last line of defence.

Cybersecurity Risks in Smart Cities: When Connected Infrastructure Fails

How connecting traffic control, emergency alerts and utilities concentrates cyber risk in cities, what the Dallas and Atlanta incidents showed, and what governments recommend.

Weaponized Drones: Hijacking, GPS Spoofing and Emerging Cyber Warfare Risks

How drones can be hijacked, jammed or misled by GPS spoofing, what researchers have demonstrated, and why governments treat drone fleets as a security risk.

Ransomware Attacks on Hospitals: How Healthcare Cyberattacks Put Patients at Risk

How ransomware against hospitals and their suppliers delays care and endangers patients, what the Düsseldorf and WannaCry cases show, and what research says about deaths.

Operational blunder exposes massive Russian cyber espionage attack on Ukrainian prosecutors

A major cyberattack has compromised the email accounts of...

Cyber Attacks on Space Infrastructure: Satellites, GPS and the Ground Systems Behind Them

From the Viasat KA-SAT hack to GPS jamming over the Baltic, a research guide to how attackers target satellites, navigation signals and ground stations, and why it matters on Earth.

French Supermarket Refrigeration Cyberattack: How Hacking the Cold Chain Can Endanger Lives

In October 2026 attackers heated refrigeration cabinets in hundreds of French supermarkets to as much as 50°C. No one was hurt, but the attack shows how hacking the cold chain can endanger lives through fire, food poisoning and spoiled medicines.

Cyberattacks on Nuclear Facilities: Stuxnet, Kudankulam and the Limits of Air Gaps

Stuxnet, the Davis-Besse worm and malware at India’s Kudankulam plant: what they show about cyber risk at nuclear facilities and the limits of air gaps.

Triton: When Hackers Target the Safety Systems That Prevent Industrial Disasters

The 2017 Triton attack targeted the safety systems that prevent industrial disasters. What happened, who was charged, and how plants protect their last line of defence.

Cybersecurity Risks in Smart Cities: When Connected Infrastructure Fails

How connecting traffic control, emergency alerts and utilities concentrates cyber risk in cities, what the Dallas and Atlanta incidents showed, and what governments recommend.

Ransomware Attacks on Hospitals: How Healthcare Cyberattacks Put Patients at Risk

How ransomware against hospitals and their suppliers delays care and endangers patients, what the Düsseldorf and WannaCry cases show, and what research says about deaths.

FBI warns of AVrecon malware targeting outdated routers linked to proxy based cybercrime

A serious cybersecurity warning has been issued regarding commonly...

Related Articles

Popular Categories