Coinbase Eyes Acquisition of CoinDCX Following $44 Million Crypto Hack
July 29, 2025
In a significant development for India’s burgeoning cryptocurrency landscape, U.S.-based crypto giant Coinbase is reportedly in advanced talks to acquire CoinDCX, one of India’s largest crypto exchanges. This move comes amid CoinDCX’s efforts to recover from a recent $44 million hack that exposed vulnerabilities within the platform’s security infrastructure.
Acquisition Talks and Valuation Impact
Sources familiar with the ongoing discussions have indicated that the proposed deal may value CoinDCX at under $900 million—a stark decline from its peak valuation of $2.2 billion recorded three years ago. This potential acquisition marks a strategic push by Coinbase to deepen its presence in India, a market it has eyeing for growth in the retail cryptocurrency trading sector.
“Coinbase sees this as a long-term strategic bet," commented one insider who requested anonymity. "Buying CoinDCX at this discounted valuation is essentially a low-cost gamble—positioning itself for potential upside if India’s crypto market eventually matures."
Coinbase has previously acquired stakes in both CoinDCX and rival Indian crypto exchange CoinSwitch, further signaling its confidence in the country’s digital asset potential.
When asked for comment, a Coinbase spokesperson declined to confirm details on the acquisition but stated, “We have a bold mission to increase economic freedom globally, and continuously explore opportunities around the world to build, buy, partner, and invest to accelerate our roadmap.”
Possible Industry Consolidation
In addition to the acquisition, there is speculation of a future consolidation involving Coinbase’s stakes in both CoinDCX and CoinSwitch. Although no formal negotiations have begun, some industry observers suggest that a merger between the two Indian exchanges could be considered. However, CoinSwitch’s co-founder Ashish Singhal has publicly denied any active merger discussions, underscoring a belief that competition benefits the ecosystem and users alike.
The $44 Million Crypto Theft
On July 19, CoinDCX disclosed that it had fallen victim to a cyberattack resulting in a $44 million loss after hackers accessed an internal account used to provide liquidity to customers. Notably, no individual customer funds were reportedly compromised in the breach.
Unlike some global crypto firms such as Binance and Bybit, which promptly disclose security incidents, CoinDCX revealed the attack nearly 17 hours after initial signs of suspicious activity. The company explained this delay by citing the need for a thorough investigation before communicating details publicly, aiming to maintain transparency and restore community trust.
In response to the breach, CoinDCX launched an unprecedented recovery bounty program offering up to 25% — approximately $11 million — of any recovered funds as an incentive for those assisting in tracing and retrieving the stolen assets.
Cryptocurrency forensic analyst Giuseppe Ciccomascolo indicated that the hackers likely targeted backend servers or compromised internal credentials rather than exploiting fundamental blockchain vulnerabilities. The stolen cryptocurrency was quickly moved across multiple blockchain networks and passed through mixing services to obfuscate the trail, complicating recovery efforts.
“Hot wallets remain disproportionately used to enable 24/7 liquidity, but these are precisely the assets that get hit," said Ciccomascolo. A "hot wallet" refers to a cryptocurrency wallet connected to the internet, enabling convenient transactions but also elevating the risk of online threats.
Financial and Transparency Concerns
Financial statements from Neblio Technologies, the operator behind CoinDCX in India, reveal reported profits of ₹15.5 crore for the fiscal year 2024 and ₹28 crore for 2023. However, a significant portion of revenues—about 60% in FY24—stemmed from services rendered to affiliated entities abroad. Excluding these related-party transactions would reflect losses for the company during this period.
CoinDCX’s approach to auditing and transparency also contrasts with global standards. While major international exchanges like Coinbase and Binance engage in regular, independent third-party proof-of-reserves (PoR) audits, CoinDCX conducts these reviews with scopes defined internally. Fintech expert Jayjit Biswas criticized this approach, noting it undermines audit independence and transparency.
Moreover, CoinDCX reported in April 2025 that roughly 28% of assets—around $158 million—were held in externally managed "partner funds" or hot wallets, a level significantly higher than international best practices that recommend keeping such assets below 5% to minimize risk exposure.
Industry-Wide Ramifications
The recent hack on CoinDCX follows a series of security breaches across the Indian crypto industry. In July 2024, WazirX, India’s then-largest exchange, suffered a crippling $235 million cyberattack. Investigations into WazirX not only revealed massive theft but also unearthed questionable transactions linked to related parties controlled by its founders, raising concerns about governance and regulatory oversight. These events have sparked intensified scrutiny from India’s Financial Intelligence Unit (FIU), law enforcement agencies, and regulatory bodies.
Legal experts like Pranesh Prakash, principal consultant at Anekaanta and fellow at Yale Law School’s Information Society Project, emphasize that the underlying problem is the absence of clear consumer protection and regulatory frameworks for cryptocurrency in India. He advocates for an outcomes-based regulatory approach that ensures investor safety and disclosure norms akin to those governing traditional financial sectors.
Security analysts also conjecture that both the CoinDCX and WazirX incidents illustrate risky liquidity management practices that rely heavily on hot wallets, exposing platforms to unnecessary threats.
Looking Ahead
Coinbase’s potential acquisition of CoinDCX could represent a pivotal moment for the Indian crypto market, signaling increased international confidence despite recent setbacks. It may also prompt broader calls for improved governance, transparency, and security standards to safeguard investors and bolster the sector’s credibility.
As Coinbase prepares to roll out retail crypto trading in India following its registration with the FIU earlier this year, the company’s engagement with domestic exchanges will be critical in shaping the industry’s future trajectory.
This article was compiled using information from Bloomberg, Mint Premium, and industry experts.