CoinDCX hack: Anonymous group claims to know suspects, whereabouts of $44M
Synopsis
Key Takeaways
An anonymous collective calling itself the Freedom Activist Group has claimed it has identified two individuals connected to the CoinDCX cryptocurrency exchange hack — including one known only as 'Diana' — and says it knows where the approximately $44 million in stolen funds are currently held. The claims, circulated via encrypted channels, remain entirely unverified, and no arrests have been announced in the core hacking case.
What the Group Claims
In messages shared across encrypted platforms, the Freedom Activist Group stated it would soon release a larger cache of evidence, reportedly including wallet trails, chat logs, screenshots, and transaction hashes. The group identified one suspect by the name 'Diana', without providing a surname, nationality, photograph, or any supporting documentation. It warned that 'many more things will be revealed' in forthcoming disclosures.
The identity, credibility, and motivations of the group remain entirely unknown. Security researchers have noted the collective could be hacktivists, a rival threat actor, or independent online investigators — a distinction that matters significantly when assessing the reliability of its claims.
What CoinDCX Has Confirmed
CoinDCX, one of India's largest cryptocurrency exchanges, previously confirmed that attackers compromised an internal operational account and made off with approximately $44 million. The exchange stated that customer funds were not affected and that the company would cover the losses from its own reserves. Beyond that, the exchange has not publicly named any suspects, and law enforcement authorities have not announced any arrests in connection with the hack.
Risks of Unverified Disclosures
Security researchers have raised serious concerns about the potential consequences of the Freedom Activist Group's approach. Publishing unverified names can cause significant harm to innocent individuals falsely implicated in a crime. Equally, if the named suspects are genuine, premature public disclosure could alert them, allowing time to move funds across wallets or destroy digital evidence before investigators can act.
This concern is not hypothetical — in several high-profile cryptocurrency investigations globally, public 'exposure' campaigns have complicated formal law enforcement efforts by collapsing the element of surprise. Until verifiable evidence is independently reviewed and authenticated, the group's statements must be treated strictly as allegations.
What Happens Next
The Freedom Activist Group has indicated it will release further material imminently. Whether that material constitutes genuine investigative leads or unverifiable claims will determine its impact on the case. Formal investigators and CoinDCX have not publicly responded to the group's assertions. The investigation into the underlying hack is reportedly ongoing, and this article will be updated as verified information becomes available.