The CoinDCX Incident Reveals a Hard Truth About Exchange Security
An Indian exchange recently lost $16 million from wallets it claimed were retired after a July 2025 hack, and the CEO had previously dismissed earlier breach reports as a false alarm before the loss was confirmed.
This incident highlights a critical distinction in digital asset safety: unlike a physical wallet found decades later, billions lost to centralized exchange hacks often vanish permanently due to a lack of insurance and legal recourse. The mechanics here show that when funds are held on an exchange platform, the user does not truly own the coins but holds a claim to them.
A Tale of Two Wallets: Custodial Failure vs. Personal Recovery
The contrast between institutional loss and personal recovery is stark. In one scenario, an old wallet and a handful of family photographs sat hidden inside a Cheyenne home for decades, waiting for someone to recognize the four little girls staring out from the pictures.
J.R. Larsen did not know George Monroe Long when he discovered the wallet and a collection of old keepsakes tucked away in a hiding spot in his house, but there were clues. An envelope addressed to George Monroe Long at 3352 Alexander Ave., an old Wyoming Gold bank card in Mrs. Long’s name, folded maps and a small stack of faded family photographs provided the necessary identification.
It did not take long before people started calling, and on Wednesday evening, those girls — now grown women — got their father’s wallet back. For the four sisters, seeing their father’s handwriting, photographs and belongings again was a wonderful surprise, 20 years after his death. The family moved from Kimball, Nebraska, to Cheyenne when the oldest daughter Cindy was about 4 or 5. They first rented on Pershing Boulevard before a succession of houses on the same street.
George Monroe Long was born April 28, 1929, and his daughters received their father’s belongings 20 years after his death. This recovery story underscores a reality that crypto holders rarely experience: physical objects can be reclaimed, but digital funds lost to a hack often cannot.
The Mechanics of the Loss
CoinDCX, India’s largest cryptocurrency exchange, said it lost about 15.99 million Tether (CRYPTO: USDT), worth around $16 million, from old wallets that it said were no longer in use after a July 2025 hack. According to CoinDCX, customer funds were not affected, and the company has promised to cover the loss. However, this incident reminds us that while your balance may look secure in an app, the systems behind it can fail unexpectedly.
Exchanges manage customer funds using two types of wallets. Hot wallets connect to the internet to enable quick transactions, while cold wallets are offline, making them more secure against theft. CoinDCX’s troubles began with deposit addresses it set up in January 2025, which were compromised in a July 2025 hack.
Although CoinDCX said it had stopped using those old addresses, customers kept sending funds to them. Unfortunately, the internal service responsible for transferring those deposits into safer wallets failed. On-chain investigator ZachXBT noted that one of the compromised addresses still directed deposits to CoinDCX’s current hot wallet as recently as April and May.
The catch is that once the exchange absorbs the loss or if it cannot, the funds are gone from the ledger accessible by the user. In contrast, traditional bank customers enjoy strengthened protections. FDIC insurance covers up to $250,000 per depositor, and when a bank fails, another institution often assumes its accounts.
In contrast, crypto on exchanges lacks FDIC insurance, and the Securities Investor Protection Corporation (SIPC) does not extend protections to cryptocurrencies not classified as securities. Conversely, crypto customers may face a lengthy court process. After the Mt. Gox exchange collapsed in 2014, users faced years of legal proceedings to recover even a fraction of their assets.
What It Means Now
This post answers a reader’s open question left by today’s news, centred on Lost wallet recovery. The headline states the answer or the subject’s significance: recovering billions lost to a centralized exchange hack is realistically near impossible compared to the tangible success of recovering a physical wallet decades later.
When you keep your cryptocurrencies on an exchange, you don’t truly “own” those coins; the exchange does. Instead, you hold a claim to them. If that claim is invalidated by a hack, failed internal services, or corporate negligence, the mechanics of recovery differ vastly from finding a grandfather’s wallet in a closet.
The family moved from Kimball, Nebraska, to Cheyenne when the oldest daughter Cindy was about 4 or 5. They first rented on Pershing Boulevard before a succession of houses on the same street. “We’ve actually lived on Alexander in four different homes,” Cindy said. “We moved in a wheelbarrow, basically — across the street, down the street. He worked three jobs, but the times that he was home, he always took time to be a father.”
That meant badminton and kickball, skateboards, and tennis lessons. George cut his daughters’ hair himself, something the sisters can laugh about now when they look at their childhood photographs. George earned his pilot’s license before his driver’s license, his daughters said, and later taught people to fly.
Years later, Cindy’s own children learned to listen for their grandpa’s plane approaching their home north of Cheyenne. The kids would climb onto the roof to watch as he came in low and put on a show overhead. Before George was the dad driving four girls across the country, he was a soldier.
A Presidential Memorial Certificate honors George M. Long for his service in the U.S. Armed Forces. Another surviving document, dated Oct. 23, 1952, shows a commendati
Sources
- Google Wallet
- Daughters Overjoyed When Stranger Finds Father's Wallet Lost For Decades
- An Indian Exchange Lost $16 Million From Wallets It Said It Had Retired. Is It Safe to Leave Crypto on an Exchange?
Photo: Tony Webster (CC BY 2.0)
