Tether reportedly blacklisted TRON wallets holding about $2.2 million in USDT, which AMLBot linked to CoinDCX’s roughly $16 million outflow. The report describes a freeze, not a recovery of the full outflow. The Defiant

Oct 23, 2026, 18:18 UTC

CoinDCX first said the wallets had been compromised in July 2025 and that current customer and central wallets were unaffected. It later acknowledged losses after its process for collecting deposits from retired wallets failed; the exchange said it absorbed those losses and users had been credited, without disclosing the loss amount. The Defiant’s earlier report

ZachXBT disputed the account, alleging that one address CoinDCX called old was still forwarding user deposits to its current hot wallet as recently as May 2026. He urged users to withdraw, arguing the exchange had first denied a theft and disclosed the loss later. These are ZachXBT’s allegations; the cited reporting does not independently establish why the address remained active or resolve the dispute. ZachXBT’s post

Ask your own

Case file

Answered Oct 23, 2026, 18:18 UTC

Sources 3

The Defiantthedefiant.io
The Defiant’s earlier reportthedefiant.io
ZachXBT’s postx.com

Research trace 6

The linked original X post
Latest posts of @CoinDesk
Latest posts of @DefiantNews
The page thedefiant.io
The reports describe Tether blacklisting TRON wallets AMLBot associates with CoinDCX outflows, with about $2.2 million frozen. CoinDCX’s account and ZachXBT’s challenge over whether the compromised addresses were still active need fuller sourcing.
The reports say Tether froze about $2.2 million in USDT on TRON wallets AMLBot linked to CoinDCX’s roughly $16 million outflow. CoinDCX later described losses from a failed process for sweeping deposits sent to retired addresses, while ZachXBT challenged the explanation, saying a supposedly retired compromised address still received user deposits as recently as May 2026.