A claim attributed to the chief marketing officer of Salus, a blockchain security firm, alleges that CoinDCX, one of India's largest centralized crypto exchanges, may have lost approximately
A claim attributed to the chief marketing officer of Salus, a blockchain security firm, alleges that CoinDCX, one of India's largest centralized crypto exchanges, may have lost approximately $15.99 million in a combination of USDT and TRX, though the estimate remains unconfirmed by CoinDCX and no independently verifiable on-chain evidence has been supplied alongside the allegation.
The allegation originates from a statement attributed to the CMO of Salus, a firm specializing in smart contract and blockchain security audits. According to the claim, CoinDCX may have lost about $15.99 million across two assets: USDT, the dollar-pegged stablecoin issued by Tether, and TRX, the native token of the Tron network. The operative language in the claim is critical: "may have lost" and "about" are both qualifiers that place this estimate squarely in the realm of possibility rather than confirmed fact. For related coverage, see Hyperliquid () Review 2026: A Real User's Walk Through the Onchain Exchange That Refuses to Be a CEX.
No exact wording from the Salus CMO's original statement was included in the materials underlying this report, so the figure of $15.99 million should be treated as a paraphrased estimate attributed to that source, not a direct quote. Salus has not, based on available information, published an official post-mortem or incident report containing wallet addresses, transaction hashes, or a forensic methodology that would allow independent analysts to verify the claimed figure. For related coverage, see Why Is Injective (INJ) Price Down Today? Key Drivers.
The incident, as framed by the Salus CMO's estimate, concerns a centralized exchange, not a decentralized protocol. That distinction matters because centralized exchanges hold customer assets in custodial wallets under their own control; any outflow requires either an authorized withdrawal, a compromised key, or an internal transfer, and distinguishing between those outcomes requires data that has not been made public as of this writing. For related coverage, see Coinbase US Midterm Election Dashboard Excludes Michigan, Nevada.
The combined estimate cited in the Salus CMO's claim is approximately $15.99 million. USDT and TRX are the only two assets named in the available context. No breakdown of how much of the total is attributed to USDT versus TRX has been provided, and assigning dollar amounts or token quantities to either asset individually without that source data would be speculative.
Both USDT and TRX share a significant overlap on the Tron blockchain, where Tether has issued a substantial portion of its total circulating USDT supply. The Tron network has emerged as the dominant settlement layer for USDT transfers, particularly in Asian markets, owing to low transaction fees and fast finality. That overlap means a loss event involving both assets could plausibly involve Tron-native wallets, but the research materials contain no wallet addresses, no block explorer links, and no transaction identifiers that would confirm this interpretation.
Without a confirmed on-chain transaction hash, the $15.99 million figure cannot be cross-referenced against block explorers such as Tronscan to verify the sender, receiver, timestamp, or USD equivalent at the time of transfer. Any report that treats this figure as an established balance-sheet impact, rather than an unverified external estimate, would be misrepresenting the current state of evidence. Readers tracking this story on-chain should look for Tronscan entries linked to known CoinDCX wallet addresses before treating the Salus figure as confirmed.
The Tron network's role as a primary settlement rail for USDT is relevant context here: according to DeFiLlama's Tron chain data, Tron hosts one of the largest stablecoin pools of any blockchain, making it a frequent target for exchange-related security incidents precisely because the dollar value of assets in transit is high. That said, high stablecoin volume on Tron is not evidence that CoinDCX experienced a loss; it is context for why an exchange operating on that network could, in principle, face significant dollar exposure if wallets were compromised.
As of this report, no public statement from CoinDCX acknowledging, denying, or contextualizing the Salus CMO's estimate has been incorporated into the available evidence. The absence of an exchange statement means the $15.99 million figure rests entirely on a single attributed source, and readers should weight it accordingly. A centralized exchange facing a genuine nine-figure loss event would typically issue a user notice, suspend withdrawals, or publish a security advisory; the absence or presence of such actions by CoinDCX is a primary signal to watch.
Several pieces of information would materially change the picture if they became available. First, a CoinDCX statement confirming or denying that a loss event occurred would establish whether the Salus estimate is directionally accurate. Second, wallet addresses and transaction hashes would allow blockchain analysts to independently verify the amount, the counterparties, and the timing. Third, a Salus forensic report explaining the methodology behind the $15.99 million estimate would clarify whether that figure derives from on-chain observation, internal data shared by CoinDCX, or a different source entirely.
The distinction between these scenarios carries real consequences for CoinDCX's roughly 15 million registered users. If the loss were confirmed and involved hot wallet funds, users would need to know whether their balances are at risk. If the figure represents an internal transfer between CoinDCX wallets that was misread as an outflow, the story changes entirely. Neither outcome can be ruled in or out with the evidence currently available.
Incidents of this type, where a security firm makes a public claim about an exchange before the exchange itself has responded, have occurred in the broader industry and illustrate the tension between responsible disclosure timelines and public market awareness. The scrutiny regulators have applied to exchange withdrawal practices in other jurisdictions underscores why exchange security claims, even unconfirmed ones, attract immediate attention from users and market observers.
A public claim that a specific exchange "may have lost" a specific dollar amount involves at least three distinct assertions that require independent verification: that an outflow occurred, that the exchange was the wallet owner, and that the movement was unintended rather than operational. None of these can be confirmed from a headline figure alone, regardless of the credibility of the source making the claim.
Wallet ownership on public blockchains is probabilistic, not certain. A wallet address associated with CoinDCX in one database may have been reassigned, is shared with a liquidity provider, or belongs to a custody partner rather than the exchange's own treasury. Transaction intent, meaning whether a transfer was a hack, an internal rebalance, an OTC settlement, or a cold storage migration, cannot be read from on-chain data without corroborating off-chain information from the wallet operator.
Official exchange statements, combined with independently verifiable on-chain records, are the minimum bar for treating a loss estimate as confirmed. A security firm's estimate, even from a reputable auditor, represents an external reading of data that the exchange itself may interpret differently. Stablecoin-related exchange claims in particular warrant this standard, given the regulatory attention that USDT flows increasingly attract; the evolving regulatory framework around stablecoin issuance and custody means that unverified loss claims involving USDT can have compliance implications that extend beyond the immediate security question.
The Salus CMO's role as the named source adds accountability but does not substitute for primary evidence. Salus operates as a security auditor, and its CMO's public statements carry reputational weight in the security community; however, the absence of a published report with supporting methodology means this claim cannot yet be graded as anything higher than an unconfirmed allegation from a single named source.
No. Based on the information available, CoinDCX has not issued a public statement confirming, denying, or addressing the Salus CMO's estimate of approximately $15.99 million in USDT and TRX. The claim originates solely from the Salus CMO and has not been independently corroborated by on-chain evidence, a regulatory filing, or an exchange notice as of this report.
The two assets named in the Salus CMO's estimate are USDT, the Tether-issued dollar stablecoin, and TRX, the native token of the Tron blockchain. No breakdown of the individual dollar values attributed to each asset was provided in the available materials, and the combined figure of approximately $15.99 million should be treated as an aggregate estimate pending further disclosure.
The estimate was attributed to the chief marketing officer of Salus, described as a blockchain security firm. No further identification of the individual, nor the specific platform or format in which the statement was made, has been included in the available evidence. Readers who locate the original statement should verify the exact wording to determine whether the $15.99 million figure is a precise on-chain observation or a rounded estimate based on partial data.
The most important near-term signal is an official response from CoinDCX. A statement confirming a security incident, suspending withdrawals, or announcing a user reimbursement program would substantially change the risk calculus for the exchange's users. Equally important would be a published Salus forensic report containing wallet addresses and transaction identifiers that can be cross-referenced on Tronscan or a comparable block explorer. If neither materializes within a short window following the initial claim, that silence itself becomes data, though it still does not confirm or deny the underlying allegation. Traders with active positions on CoinDCX and holders of USDT or TRX on that platform should monitor the exchange's official communication channels directly rather than relying on secondary interpretations of the Salus estimate.
Broader market participants tracking stablecoin security should also note that the Tron network's concentration of USDT supply makes it a recurring focus for exchange-security reporting; the Tron network's market data and on-chain activity metrics can provide a real-time baseline against which any confirmed transaction related to this incident could eventually be measured. Until CoinDCX or Salus publishes independently verifiable supporting data, the $15.99 million figure should be treated as an unconfirmed external estimate, not a confirmed exchange loss.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
The post Salus CMO Says CoinDCX May Have Lost $15.99M in USDT, TRX was initially published on Coincu.
