Coinsbuy Loses $8 Million in Coordinated Ethereum and TRON Attack

What happened: Crypto payments processor Coinsbuy suffered a rapid, cross-chain exploit on August 9, 2026, losing between $7.9 million and $8.07 million across Ethereum and TRON wallets. On-chain forensics linked the theft to a single attacker who funneled assets through cross-chain bridges and laundered funds into Monero (XMR) via FixedFloat, ChangeNOW, and BingX. ChangeNOW managed to freeze a six-figure portion of the stolen assets. Coinsbuy paused then resumed withdrawals, stating the incident was contained and losses were fully covered from company reserves. The attack vector is still unknown, but the rapid wallet refill suggests private keys were likely not compromised.

Why it matters: This incident underscores the persistent vulnerabilities in cross-chain infrastructure and the evolving sophistication of crypto attackers. The fact that Coinsbuy quickly refilled affected wallets and resumed operations mitigated customer impact, but the unknown exploit vector raises ongoing security concerns for exchanges operating across multiple blockchains. The laundering of funds into privacy coins like Monero further complicates recovery and regulatory oversight.

Source: CoinDesk