ZachXBT told followers to withdraw all funds from CoinDCX if you value your assets, calling its co-founders clowns running a circus.

ZachXBT told followers to withdraw all funds from CoinDCX if you value your assets, calling its co-founders clowns running a circus.

He says they publicly and privately denied a theft occurred, meaning they lied or were negligently incompetent, then later disclosed the $16M theft instead of being transparent initially. He adds it is not the first time CoinDCX did this, groups Indian CEXs CoinDCX, WazirX and BitBNS together, and says he still helped freeze six figures for CoinDCX.

That disclosure is CoinDCX's 11:47 UTC update on the TQKJQ wallet: it says deprecated addresses compromised in July 2025 kept receiving user deposits, its sweeping process failed for a period, found this morning, causing operational losses absorbed by CoinDCX while user wallets were credited and customer assets stay in segregated cold wallets.

Earlier today CoinDCX had said users funds are safe and the Oct 21 movements involved old January 2025 addresses with no connection to CoinDCX. The alert was amplified as withdraw warning with not your keys, not your Bitcoin framing.

So: $16M movement first flagged as suspected hack, denied as old-wallet activity, then reframed by CoinDCX as unswept deposits to deprecated wallets with losses absorbed, which ZachXBT treats as a hidden theft disclosure.