On August 9, 2026, the Coinsbuy crypto platform was subjected to a coordinated cyberattack, as a result of which the attackers withdrew funds totaling about $8.07 million. According to blockchain researchers from BlockWatchdog, the attack began with a test transaction on the TRON network, after which 6.04 million USDT was withdrawn from eight wallets within an hour. At the same time, the hacker emptied three addresses on the Ethereum network, stealing 1.89 million USDT and 77 ETH, which were subsequently exchanged for 981.1 ETH. On-chain analysis made it possible to link these actions into a single operation thanks to the use of the Bridgers cross-chain service, whose payment contracts coincided in time and amounts with the attacker's transactions.

About 79% of the stolen funds passed through the FixedFloat decentralized exchange using dozens of one-time addresses. In response to the incident, the ChangeNOW service froze 150 ETH (about 288 thousand dollars), and another 282 ETH remain stationary at five addresses. A notable detail of the investigation was the behavior of the platform itself: within a day after the attack, the Coinsbuy team replenished the affected wallets with 3.93 million USDT. The transaction amounts and addresses matched the stolen ones with an accuracy of 0.05%. Experts point out that this practice makes sense only if the company is confident that there is no compromise of private keys, since no one replenishes a hacked wallet with seven-digit amounts twice in one night.

The exact vector of the initial attack has not been determined at the moment, and there are no official comments from Coinsbuy. The researchers suggest that the incident could not have been the result of an external hacker attack, but a complex internal operation or an imitation of hacking to manipulate liquidity. This case has become one of the largest in a series of recent incidents in the crypto industry. Against the background of this event, analysts continue to record an increase in cybercrime: earlier in July, attackers exploited a vulnerability in Coldcard hardware wallets, as a result of which hundreds of users lost more than 1,300 BTC for a total of about $ 89 million.