Coinsbuy crypto payment platform wallets drained of about US$8 million; cause not yet published
Coinsbuy, a crypto payment processor, lost about US$7.9–8.07M from platform wallets on Ethereum and TRON on 9 Aug 2026. It says clients were made whole from reserves. Cause unpublished; only a small part frozen. Nothing for families to do.
Nothing for you to do unless you use Coinsbuy to take crypto payments. If you do, check your balances and settlement history, and ask Coinsbuy directly to confirm your funds were covered.
What’s happening
On 9 August 2026 attackers withdrew funds from several wallets run by Coinsbuy, a crypto payment processor, on the Ethereum and TRON networks. Outside researchers put the loss at about US$7.9 million at first and US$8.07 million after a transaction-level count. Coinsbuy confirmed unauthorised withdrawals, said the problem was contained, said it had covered all affected client funds from its own reserves, and said services were running normally after a short pause. It has not stated the cause or the amount lost, and promised a further update when its internal investigation is verified. As of the latest sources, no post-mortem has been published. Researchers say the attacker moved funds through swap services towards Monero; ChangeNOW reportedly froze 150 ETH (about US$288,000 at the time) and further funds were reported unmoved. Coinsbuy offered a US$100,000 reward for information on those responsible. No arrests or charges have been reported. Whether private keys leaked is unknown.
- What
- Breach
- Affects
- Coinsbuy crypto payment processing platform
- Fixed in
- Nothing to patch
- Since
- 9 Aug 2026
- Closed
- 15 Oct 2026
Timeline
- UpdateNothing to patch
ChangeNOW's explainer was last updated, with no new findings. It says the cause is unconfirmed and an official report is still to come.
- UpdateNothing to patch
Coinsbuy offered a US$100,000 reward for information identifying those responsible, plus a bonus for help recovering the funds.
- UpdateNothing to patch
ForkLog reported blockchain researchers' loss figure of US$8.07 million. About US$6.04 million USDT left eight TRON wallets and about US$1.89 million USDT plus 77 ETH left three Ethereum addresses. ChangeNOW froze 150 ETH (about US$288,000), and the attacker was moving funds through FixedFloat and other services.
- UpdateNothing to patch
Coinsbuy confirmed unauthorised withdrawals from several platform wallets. It said the issue was contained, affected client funds were covered from its own reserves, and services were running normally. It withheld technical details pending an internal investigation.
- Made publicNothing to patch
Attackers began draining several Coinsbuy platform wallets on Ethereum and TRON. A blockchain researcher flagged it, and reports put the loss at about US$7.9 million at first.
Sources
- Official Statement on the August 9 Security IncidentCoinsbuy · 10 Aug 2026
- Coinsbuy confirms security breach after wallets reportedly drained of $7.9MCointelegraph · 10 Aug 2026
- Experts reveal details of $8 million Coinsbuy hackForkLog · 10 Aug 2026
- Coinsbuy hackChangeNOW · 15 Oct 2026