Coinsbuy Suffers $7.9M Cross-Chain Heist as Attacker Routes Funds to Monero

Crypto payment processor Coinsbuy suffered a significant loss on August 9 when over $7.9 million was drained from wallets linked to the company across both Ethereum and TRON.

The incident, first reported by blockchain investigator Specter, involved two Ethereum addresses and one TRON address as theft destinations. The attacker's access allowed them to move assets on multiple chains, but it is unclear whether private keys or administrator credentials were compromised.

PeckShield traced the stolen funds through ChangeNOW, FixedFloat, and BingX, with part of the proceeds being converted into Monero, a privacy-focused cryptocurrency. Specter reported that ChangeNOW had frozen a six-figure amount before it could be moved further, but did not confirm the exact figure.

Coinsbuy temporarily paused deposits and withdrawals following the incident, but services were reportedly restored hours later. The company has not published a technical postmortem or confirmed the root cause of the attack.