Coinsbuy suffers $7.9M exploit across TRON and Ethereum - Investigators search for entry point

Coinsbuy, a cryptocurrency payment platform, suffered an exploit. The incident resulted in the platform being drained of $7.9 million from wallets across TRON [TRX] and Ethereum [ETH], exposing a cross-chain security breach.

Following the attack, the exploiter moved funds from Coinsbuy-linked addresses into another TRON wallet.

The receiving wallet then consolidated the assets before transferring larger amounts to other destinations. This sequence allowed the attacker to reorganize the stolen funds before dispersing them further.

The exploiter later routed portions through ChangeNOW, FixedFloat, and BingX, expanding the transaction trail across several services. These movements complicate recovery because investigators must follow assets across different platforms, addresses, and transaction routes.

More importantly, activity across both Ethereum and TRON broadens the scope of the incident beyond one blockchain. Tracking subsequent transfers will therefore determine where the remaining funds move and whether exchanges or other services can identify and restrict the stolen assets.

Coinsbuy’s transfer systems under scrutiny