{"id":"coinsbuy-wallet-drain-theft-aug-2026","category":"breach","status":"closed","title":"Coinsbuy crypto payment platform wallets drained of about US$8 million; cause not yet published","tldr":"Coinsbuy, a crypto payment processor, lost about US$7.9–8.07M from platform wallets on Ethereum and TRON on 9 Aug 2026. It says clients were made whole from reserves. Cause unpublished; only a small part frozen. Nothing for families to do.","summary":"On 9 August 2026 attackers withdrew funds from several wallets run by Coinsbuy, a crypto payment processor, on the Ethereum and TRON networks. Outside researchers put the loss at about US$7.9 million at first and US$8.07 million after a transaction-level count. Coinsbuy confirmed unauthorised withdrawals, said the problem was contained, said it had covered all affected client funds from its own reserves, and said services were running normally after a short pause. It has not stated the cause or the amount lost, and promised a further update when its internal investigation is verified. As of the latest sources, no post-mortem has been published. Researchers say the attacker moved funds through swap services towards Monero; ChangeNOW reportedly froze 150 ETH (about US$288,000 at the time) and further funds were reported unmoved. Coinsbuy offered a US$100,000 reward for information on those responsible. No arrests or charges have been reported. Whether private keys leaked is unknown.","action":"Nothing for you to do unless you use Coinsbuy to take crypto payments. If you do, check your balances and settlement history, and ask Coinsbuy directly to confirm your funds were covered.","product":"Coinsbuy crypto payment processing platform","audience":"work","severity":"medium","patch":"na","exploited":true,"cves":[],"tags":["coinsbuy","crypto-theft","ethereum","tron","payment-processor","data-breach","monero"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"Official Statement on the August 9 Security Incident","url":"https://coinsbuy.com/news/official-statement-on-the-august-9-security-incident/","by":"Coinsbuy","date":"2026-08-10"},{"kind":"news","title":"Coinsbuy confirms security breach after wallets reportedly drained of $7.9M","url":"https://cointelegraph.com/news/coinsbuy-confirms-security-breach-after-wallets-reportedly-drained-of-79m","by":"Cointelegraph","date":"2026-08-10"},{"kind":"research","title":"Experts reveal details of $8 million Coinsbuy hack","url":"https://forklog.com/en/news/experts-reveal-details-of-8-million-coinsbuy-hack","by":"ForkLog","date":"2026-08-10"},{"kind":"post","title":"Coinsbuy hack","url":"https://changenow.io/blog/coinsbuy-hack","by":"ChangeNOW","date":"2026-10-15"}],"started":"2026-08-09","closed":"2026-10-15","created":"2026-11-03T21:39:38.036Z","updated":"2026-11-03T21:39:38.036Z","cve_notes":[],"timeline":[{"at":"2026-10-15","added":"2026-11-03T21:37:06.107Z","kind":"other","text":"ChangeNOW's explainer was last updated, with no new findings. It says the cause is unconfirmed and an official report is still to come.","url":"https://changenow.io/blog/coinsbuy-hack","by":"ChangeNOW","patch":"na"},{"at":"2026-08-10","added":"2026-11-03T21:37:06.107Z","kind":"other","text":"Coinsbuy offered a US$100,000 reward for information identifying those responsible, plus a bonus for help recovering the funds.","url":"https://coinsbuy.com/news/official-statement-on-the-august-9-security-incident/","by":"Coinsbuy","patch":"na"},{"at":"2026-08-10","added":"2026-11-03T21:37:06.107Z","kind":"other","text":"ForkLog reported blockchain researchers' loss figure of US$8.07 million. About US$6.04 million USDT left eight TRON wallets and about US$1.89 million USDT plus 77 ETH left three Ethereum addresses. ChangeNOW froze 150 ETH (about US$288,000), and the attacker was moving funds through FixedFloat and other services.","url":"https://forklog.com/en/news/experts-reveal-details-of-8-million-coinsbuy-hack","by":"ForkLog","patch":"na"},{"at":"2026-08-10","added":"2026-11-03T21:37:06.107Z","kind":"other","text":"Coinsbuy confirmed unauthorised withdrawals from several platform wallets. It said the issue was contained, affected client funds were covered from its own reserves, and services were running normally. It withheld technical details pending an internal investigation.","url":"https://coinsbuy.com/news/official-statement-on-the-august-9-security-incident/","by":"Coinsbuy","patch":"na"},{"at":"2026-08-09T13:00Z","added":"2026-11-03T21:37:06.107Z","kind":"disclosed","text":"Attackers began draining several Coinsbuy platform wallets on Ethereum and TRON. A blockchain researcher flagged it, and reports put the loss at about US$7.9 million at first.","url":"https://cointelegraph.com/news/coinsbuy-confirms-security-breach-after-wallets-reportedly-drained-of-79m","by":"Cointelegraph","patch":"na"}],"url":"https://hard.fyi/live/coinsbuy-wallet-drain-theft-aug-2026/","json":"https://hard.fyi/api/live?id=coinsbuy-wallet-drain-theft-aug-2026"}