On August 9, 2026, Coinsbuy’s wallet infrastructure was exploited via improper access control, allowing an attacker to drain approximately $7.9M across Ethereum and Tron. Flagged by PeckShield; no dedicated post-mortem has been published.

Wallets linked to Coinsbuy (a B2B crypto payment processor) were drained of more than $7.9 million across Ethereum and TRON around 13:00 UTC on August 9, 2026. The attacker laundered part of the funds into Monero (XMR) via exchanges, while ChangeNOW helped freeze a six-figure amount; Coinsbuy temporarily paused deposits and withdrawals, which have since resumed.