Coinsbuy Hack News: Over $7.9M Stolen in Ethereum and TRON Exploit

Coinsbuy Hack News: Over $7.9 Million in Stolen Funds Move to Monero A crypto payment platform tied to Coinsbuy is at the center of a major security scare after wallets linked to the service were reportedly drained of more than $7.9 million on August 9, 2026. The suspected exploit hit both the Ethereum and TRON networks almost simultaneously around 21:00 Beijing time (13:00 UTC) Blockchain monitoring firm Specter flagged the unusual outflows first, and the attacker moved quickly to launder the funds through Monero before parts of the haul could be traced or frozen. At a Glance Key Detail Information Project affected Coinsbuy Incident date August 9, 2026 Approximate time 13:00 UTC / 21:00 Beijing time Estimated loss More than $7.9 million Affected networks Ethereum and TRON Laundering route Monero (XMR) via exchanges Funds frozen Six-figure amount Monitoring Specter Recovery assistance ChangeNOW Coinsbuy response Deposits and withdrawals temporarily suspended, then restored Coinsbuy-Linked Wallets Drained Across Two Networks According to on-chain data shared by Specter, the suspected breach unfolded around 13:00 UTC (roughly 9:00 PM Beijing time) on August 9. Wallets associated with Coinsbuy were reportedly emptied across two separate blockchains, Ethereum and TRON, suggesting the attacker had access to multiple systems or private keys tied to the platform. The identified theft addresses include two Ethereum wallets and one TRON wallet, which investigators say received the bulk of the outgoing transactions. Because the attack touched two different networks at once, researchers believe this was likely a coordinated exploit rather than an isolated wallet compromise, though the precise attack vector has not been confirmed officially or independent investigators. DarkWebInformer X Post Timeline Time Event August 9, 13:00 UTC Coinsbuy-linked wallets were reportedly drained across Ethereum and TRON. Shortly after The attacker began moving the stolen funds toward Monero through exchanges. August 9–10 Specter tracked the suspicious fund movements and identified the affected wallets. Following incident ChangeNOW assisted in freezing a six-figure portion of the stolen funds. After hack Coinsbuy temporarily suspended deposits and withdrawals. August 10 Coinsbuy restored deposit and withdrawal services. Attacker Moves Stolen Funds Toward Monero Through Exchanges Once the funds were extracted, the attacker began routing them toward Monero (XMR), a privacy-focused cryptocurrency often used to obscure transaction trails. XMR's shielded ledger makes it significantly harder for blockchain analysts to follow funds once a conversion is complete, which is likely why the attacker prioritized this laundering path so quickly after the alleged theft. Reports indicate the stolen assets were funneled through one or more exchanges as an intermediary step before conversion, a common tactic used to break the on-chain link between the original theft addresses and the final destination wallets.