Share this article

CoinDCX Engineer Arrested Following July's $43.4M Exploit: Report

A software engineer working for CoinDCX has been arrested for alleged involvement in the breach after hackers allegedly exploited his credentials to siphon funds to six wallets.

Aug 1, 2025, 8:46 a.m.
Man arrested behind bars in jail (Shutterstock)
A CoinDCX software engineer was arrested following the $43.4 million exploit. (Shutterstock)

What to know:

  • A CoinDCX software engineer in Bengaluru has been arrested in connection with the theft of $43.4 million in crypto assets from the Indian exchange.
  • Local police identified the suspect as 30-year-old Rahul Agarwal, whose office-issued laptop credentials were allegedly used to access CoinDCX’s internal systems.
  • Agarwal denied direct involvement, but admitted to freelancing for unknown overseas clients.

Police in Bengaluru, India arrested a CoinDCX software engineer in connection with the theft of 3.79 billion rupees ($43.4 million) in crypto assets from the exchange last month, the Times of India reported on Thursday.

Local police identified the suspect as 30-year-old Rahul Agarwal, whose office-issued laptop credentials were allegedly used to access CoinDCX’s internal systems and initiate unauthorized transfers on July 19. The stolen assets were routed to six wallets in a coordinated breach, according to investigators.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the State of Crypto Newsletter today. See all newsletters

Agarwal denied direct involvement, but admitted to freelancing for unknown overseas clients. He also received a 1.5 million rupee deposit and a WhatsApp call from a German number shortly before the incident. Police are investigating whether malware or credential misuse during his side work enabled the hack.

The exchange’s parent company, Neblio Technologies, conducted an internal probe and confirmed that all customer assets remain secure. CoinDCX said it will absorb the losses from its own treasury.

The incident has raised concerns over internal security and potential links to international hacking groups. Authorities are probing possible North Korean involvement, echoing tactics used in prior crypto-related breaches.

The stolen funds have not been recovered. Investigations are ongoing.

Read More: North Korean Hackers Are Targeting Top Crypto Firms With Malware Hidden in Job Applications

AI Disclaimer: Parts of this article were generated with the assistance from AI tools and reviewed by our editorial team to ensure accuracy and adherence to our standards. For more information, see CoinDesk's full AI Policy.

More For You

KuCoin Hits Record Market Share as 2025 Volumes Outpace Crypto Market

16:9 Image

KuCoin captured a record share of centralised exchange volume in 2025, with more than $1.25tn traded as its volumes grew faster than the wider crypto market.

What to know:

  • KuCoin recorded over $1.25 trillion in total trading volume in 2025, equivalent to an average of roughly $114 billion per month, marking its strongest year on record.
  • This performance translated into an all-time high share of centralised exchange volume, as KuCoin’s activity expanded faster than aggregate CEX volumes, which slowed during periods of lower market volatility.
  • Spot and derivatives volumes were evenly split, each exceeding $500 billion for the year, signalling broad-based usage rather than reliance on a single product line.
  • Altcoins accounted for the majority of trading activity, reinforcing KuCoin’s role as a primary liquidity venue beyond BTC and ETH at a time when majors saw more muted turnover.
  • Even as overall crypto volumes softened mid-year, KuCoin maintained elevated baseline activity, indicating structurally higher user engagement rather than short-lived volume spikes.

More For You

Ukraine banned Polymarket and there’s no legal way for it to come back

Kyiv in Ukraine (Glib Albovsky/Unsplash/Modified by CoinDesk)

Polymarket and similar platforms are considered unlicensed gambling operators, leading to blocked access.

What to know:

  • Ukraine has no legal framework for Web3 prediction markets, and current legislation provides no recognition for such platforms.
  • Polymarket and similar platforms are considered unlicensed gambling operators, leading to blocked access.
  • Legal changes are unlikely in the near future, as Parliamentary revisions to gambling definitions are extremely improbable during wartime, leaving prediction markets in a legal deadlock.