$8 Million Heist Hits Crypto Exchange Coinsbuy in Cross-Chain Attack

Crypto exchange Coinsbuy suffered a massive loss of $8 million in an attack that spanned both TRON and Ethereum on August 9. The attacker executed a clever cross-chain trick using the cross-chain swapper Bridgers, linking the two chains into a single operation.

The attack began with a small transaction of just 5 USDT before draining eight TRON wallets of 6.04 million USDT in approximately one hour. On Ethereum, three wallets were simultaneously emptied of 1.89 million USDT and 77 ETH, which was swapped to ETH via 1inch through a wallet created on the same day.

The attacker routed about 79% of the stolen funds through instant exchange FixedFloat using roughly 50 single-use addresses. ChangeNOW froze a six-figure sum after being contacted by Specter Investigations. Around $542,000 in ETH remains unmoved across five addresses.

Coinsbuy quickly refilled the drained wallets within 24 hours, indicating that private keys were likely not compromised. However, the exchange has yet to explain how the withdrawal path was accessed.