CoinDCX Hack: $44M Lost in Fake Job Offer Scam

The crypto world just got a massive wake-up call from the CoinDCX case. CoinDCX, one of India’s top exchanges, has been hacked.

Not through a complex code exploit — but through a fake job offer scam. A single phishing email led to a $44 million loss.

It’s a chilling reminder: sometimes the biggest threats aren’t technical. They’re human.

It started with a convincing email. A trusted CoinDCX engineer, Rahul Agarwal, received a message offering a remote part-time job.

It looked legit. Polished branding. Promised flexible hours and good pay. Attached were “interview documents.” But hidden inside was malware.

Once opened, it silently crept through CoinDCX’s internal systems. It stole login credentials and mapped the entire network.

Within hours, hackers used those credentials to access core wallets. Then came the big move, and they drained $44 million in various cryptocurrencies. The attack was fast, clean, and devastating.

This scam worked because it preyed on trust especially in remote work culture.

The email mimicked official HR communication perfectly. The attached files looked like standard onboarding materials. But once clicked, they infected both the user’s device and the company’s systems.

It wasn’t just clever. It was strategically engineered.

This tactic shows how vulnerable exchanges can be to social engineering. It’s no longer just about firewalls and code. It’s about people.