Hackers Drain $7.9M From Coinsbuy; Monero Upgrade Kills Last Forensic Fallback

Crypto payment processor Coinsbuy lost more than $7.9 million on August 9, 2026, when attackers drained the company's wallets across two of the largest blockchain networks simultaneously and immediately began converting the proceeds into Monero — executing a laundering sequence that, within hours, consumed the investigator window that had enabled a partial freeze. That partial freeze, a six-figure sum immobilized with the assistance of exchange ChangeNOW, may represent one of the last recoveries of its kind: Monero's FCMP++ protocol upgrade, which delivers mathematically provable transaction untraceability in place of the coin's current probabilistic ring-signature system, is targeted for a 2026 hard fork.

The breach was detected at approximately 9:00 a.m. ET (13:00 UTC) on August 9 by on-chain monitoring firm Specter, which published an alert to its Telegram channel identifying suspicious outflows from wallets linked to Coinsbuy across both the Ethereum and TRON networks. Three wallets were named: two Ethereum addresses (0x4d1bEF2Fe998B3E3C4029EF9EA6A0534d95661d3 and 0x66790b54B891e2ebdef58a15B969Ff6fb4374b17) and one TRON address (TVpX9xCzrj6KHeNhhDJoqjzEqFMxdgubGR), according to CryptoTimes reporting on the breach. Blockchain security company PeckShield independently confirmed the breach. Coinsbuy temporarily suspended deposits and withdrawals across its platform before restoring both services the same day — though no detailed incident statement had been published as of press time.