Coinsbuy Loses $8 Million in Coordinated Crypto Attack

A coordinated attack drained approximately 8 million from the crypto payment platform Coinsbuy on August 9, with blockchain researchers tracing the theft across the Ethereum and TRON networks. The incident, which unfolded in under an hour, marks the first publicly known breach of the enterprise-focused service since its launch around 2019.

Onchain data reviewed by security firms indicates the attacker began with a small test transaction before systematically emptying eight TRON wallets of about 6.04 million in USDT. Simultaneously, three Ethereum wallets were drained of 1.89 million in USDT and 77 ETH. Blockchain investigators linked the two chains into a single operation through the crosschain swapper Bridgers, whose Ethereum payout contract sent funds directly into the attacker's swap wallet.

Following the drain, the perpetrator moved quickly to launder the proceeds. Approximately 79% of the stolen funds were routed through the instant exchange FixedFloat using roughly 50 single-use addresses. The attacker also converted portions of the assets into Monero, a privacy coin designed to obscure transaction trails. Security firm PeckShield identified ChangeNOW, FixedFloat, and...