An attacker drained $8.07 million from the exchange via TRON and Ethereum in under an hour, with funds routed through FixedFloat.
Crypto exchange Coinsbuy suffered an $8 million loss in a coordinated attack across TRON and Ethereum on August 9. The attacker drained 6.04 million USDT from TRON wallets and 1.89 million USDT plus 77 ETH from Ethereum wallets within an hour.
Onchain forensics linked the two blockchains through cross-chain swapper Bridgers, with 79% of stolen funds moving via instant exchange FixedFloat. Approximately $542,000 in ETH remains unmoved, while ChangeNOW froze a six-figure sum. Coinsbuy refilled the drained wallets within 24 hours, indicating private keys were not compromised.
The attack vector remains unidentified, though the exchange has not explained how the withdrawal path was accessed. The incident highlights vulnerabilities in cross-chain operations and instant exchange protocols.