Coinsbuy, a digital asset processing platform built for enterprise and merchant clients, was hit with a major security breach that drained more than $7.9 million from wallets across the Ethereum and TRON networks. The attack, identified on August 10, marks the first publicly known hack of the platform since it launched around 2019.
What makes this one particularly thorny for investigators: the attacker funneled a portion of the stolen crypto into Monero, the privacy coin specifically designed to make transaction tracing as difficult as possible.
How the attack unfolded
On-chain monitoring by Specter flagged suspicious activity tied to Coinsbuy-linked wallets, revealing that funds were being systematically drained across two of the industry’s most widely used networks. The attacker targeted assets on both Ethereum and TRON, suggesting either compromised private keys or a vulnerability in how Coinsbuy managed its multi-chain wallet infrastructure.
After siphoning the funds, the hacker moved quickly to obscure the trail. Portions of the stolen crypto were routed through various exchanges and converted into Monero (XMR), a coin whose privacy features make it notoriously resistant to blockchain forensics.
