Coinsbuy reports $7.9 million loss in multi-chain wallet breach

The breach occurred around 13:00 UTC, affecting wallets linked to the crypto payment service. While the exact entry point remains unconfirmed, GoPlus Security analysts noted the activity pattern aligns with a compromise of hot wallet private keys or administrator-level credentials. Blockchain investigator Specter identified two Ethereum addresses and one TRON address as the primary destinations for the pilfered assets.

Efforts to track the funds revealed that the attacker funneled portions of the capital through ChangeNOW, FixedFloat, and BingX. According to reports, ChangeNOW successfully froze a six-figure sum before it could be further obfuscated. Despite these recovery efforts, the majority of the funds appear to be moving toward Monero, complicating further on-chain tracing. Coinsbuy resumed operations shortly after the incident, though the company has yet to release a formal technical postmortem or clarify whether the stolen assets belonged to the firm or its clients.