Bollcoin reported on October 22 that, according to on-chain detective ZachXBT, after the July 2025 security incident at Indian exchange CoinDCX, its deposit address TQKJQ was still being used by a liquidity provider (LP) for 10 months. As late as April and May 2026, this address was still consolidating user deposits into CoinDCX's current public hot wallet and receiving gas fees. Based on this, ZachXBT believes the CoinDCX team has $15.8 million in user deposits that are untracked. CoinDCX previously responded that user funds are safe, that the related claims are misleading, and that the transactions in question came from old wallet addresses created in January 2025, which were compromised in July 2025.