Major Exchange hack drains $8M in stablecoins

TLDR

Hackers have stolen about $8 million in stablecoins and ETH from crypto platform Coinsbuy by draining wallets on Tron and Ethereum and routing funds through cross-chain services.

1. The attacker drained roughly $8.07 million from Coinsbuy wallets on Tron and Ethereum, mainly USDT, and laundered most of it through bridge and swap services.
2. Coinsbuy says all affected client funds were covered from its own reserves, services are back online, and it has posted a bounty to help identify and pursue the attacker.
3. The incident highlights how multi-chain stablecoin infrastructure and weak withdrawal controls can be exploited, and why users should watch how exchanges harden security after such hacks.

Deep Dive

1. How The Attack Unfolded

Blockchain investigator BlockWatchdog reports that, on 9 August 2026, an attacker began with a small 5 USDT test on Tron, then drained over 6 million USDT from eight Coinsbuy Tron wallets and another 1.89 million USDT plus 77 ETH from three Ethereum wallets, totaling about $8.07 million in value at the time of theft. This is detailed in a Decrypt investigation.

The attacker linked activity across chains using cross-chain swap service Bridgers, then pushed around $6.34 million, roughly 79% of the haul, through the FixedFloat exchange and another 150 ETH through ChangeNOW. A further 282.2 ETH, worth around $542,000 at the time, remained sitting in several addresses, suggesting not all funds were immediately laundered.

Separately, Cointelegraph and TradingView note that some stolen funds were being moved toward privacy coin Monero, consistent with common laundering patterns in recent large crypto hacks.

2. Impact On Coinsbuy Users

According to BlockWatchdog, Coinsbuy later sent about $3.93 million back into the previously drained wallets, with seven replenishments closely matching the stolen amounts. This behavior led the investigator to suggest that private keys might not have been compromised, and that the exploit could have occurred higher in the withdrawal logic.

In its public statement, Coinsbuy confirmed unauthorized withdrawals from several platform wallets, paused deposits and withdrawals, then restored services. Crucially, the firm told Cointelegraph that all affected client balances were covered from its own reserves, and that customers have not experienced any financial losses.

Coinsbuy is offering a $100,000 reward for information identifying those responsible, with an additional bonus for help recovering funds. Technical details of the breach remain undisclosed while the investigation continues, which means the exact vulnerability is still unknown.

3. Security Lessons For Stablecoins

This attack shows how stablecoin-heavy platforms are attractive targets. Here, liquid USDT on Tron and Ethereum plus cross-chain bridges and instant swap services allowed a relatively fast, multi-network theft and laundering path.

At the same time, broader industry data from CertiK indicates around $1.32 billion lost to hacks and exploits in the first half of 2026, so the Coinsbuy incident fits a trend of persistent operational and security failures across exchanges and protocols.

For users, the key questions are whether exchanges segregate client funds, run strict withdrawal controls, and transparently audit reserves and security posture. For platforms, hardening multi-chain withdrawal systems, monitoring bridge usage, and working closely with swap services to flag suspicious flows are now baseline expectations.

Conclusion

The Coinsbuy hack reinforces how attackers can exploit multi-chain stablecoin infrastructure and cross-chain tools to quickly drain and launder funds, even without clear evidence of key compromise. While Coinsbuys decision to cover client balances limits immediate user damage, the incident adds to a growing body of evidence that operational security, withdrawal controls, and transparency are as critical as token choice for anyone active in crypto. Watching how exchanges respond and upgrade defenses after such events is an important part of evaluating where to keep assets.