Tether froze 2.2 million USDT on Thursday tied to a $16 million outflow from CoinDCX, escalating a dispute over whether the exchange has actually contained the breach.
On-chain investigator ZachXBT publicly contradicted CoinDCX's account, showing that compromised deposit addresses remained active as of May 2026—well after the exchange claimed to have remediated the incident. ZachXBT called for immediate user withdrawals, signaling the vulnerability persists.
CoinDCX acknowledged a "security incident" but disclosed minimal details on the attack vector, remediation timeline, or scope of affected accounts. The 2.2 million USDT frozen by Tether represents the stablecoin issuer's first concrete intervention.
Tether's on-chain freeze capability gives it unilateral power to immobilize flagged tokens—a feature that cuts both ways. It stopped contagion here but underscores the centralized choke point stablecoin holders accept.
The incident exposes the credibility gap between what exchanges claim post-breach and what on-chain data reveals. CoinDCX users have no independent way to verify the exchange's security posture without investigators like ZachXBT drilling into wallet flows and deposit mechanics. That asymmetry of information is the real problem for retail users holding balances on compromised platforms.
