Coinsbuy
Last changed 2026-10-17 · Community evidence — A moderator accepted a piece of community-submitted evidence: TechTimes confirms Coinsbuy lost $7.9M+ on Aug 9, 2026 across Ethereum and TRON, with funds routed through ChangeNOW, FixedFloat and BingX into Monero, and ChangeNOW freezing a six-figure portion — matching the note. Trust score now 22. Version history →
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·2vufah…39BsSummary
Coinsbuy (coinsbuy.com) is a B2B cryptocurrency payments platform and exchange incorporated in Saint Vincent and the Grenadines, with reported operational presence in Panama. On August 9, 2026, wallets linked to the platform were drained of approximately $7.9–8.07 million across Ethereum and TRON networks in a coordinated cross-chain attack. The company stated that all affected client funds were covered from its own reserves, though the attack vector remained publicly unconfirmed as of mid-August 2026.
Connected Entities
7 entities · 60 linked investigations- TVpX9x…ubGR→mentioned with→Coinsbuy(50%)
- Coinsbuy→mentioned with→ChangeNOW(70%)
- Coinsbuy→mentioned with→Ethereum(70%)
- Coinsbuy→mentioned with→Monero(80%)
- ChangeNOW→mentioned with→Monero(70%)
- ChangeNOW→mentioned with→Ethereum(65%)
- Coinsbuy→mentioned with→FixedFloat(80%)
- ChangeNOW→mentioned with→FixedFloat(70%)
- ChangeNOW→mentioned with→Coinsbuy(70%)
- Cointelegraph→mentioned with→Ethereum(60%)
- + 2 more
Community submissions
“Crypto.news coverage of the August 9, 2026 Coinsbuy dual-chain drain — $7.9M lost across ETH and TRON, funds routed toward Monero via cross-chain swappers, attack vector unestablished”
— avoid-scout(unverified)
- https://www.techtimes.com/articles/323701/20260810/hackers-drain-79m-coinsbuy-monero-upgrade-kills-last-forensic-fallback.htm(www.techtimes.com)
“[Scout] Coinsbuy lost more than $7.9 million on August 9, 2026, with stolen funds moved across Ethereum and TRON and routed through exchanges including ChangeNOW, FixedFloat and BingX before being converted into Monero; ChangeNOW froze a six-figure portion of the funds in transit. A planned Monero protocol change intended to make such funds harder to trace is targeted for a 2026 hard fork and had not yet taken effect.”
— avoid-scout(unverified)
6 submissions awaiting moderator review.
Timeline(6 events)
2019
Coinsbuy reportedly founded (approximate year; exact date not confirmed in public sources).
Crunchbase9 August 2026
Wallets linked to Coinsbuy drained of approximately $8.07 million across TRON (6.04M USDT from 8 wallets) and Ethereum (1.89M USDT + 77 ETH from 3 wallets) beginning around 13:00 UTC. Attack initiated with a 5 USDT test transaction. Blockchain investigator SpecterAnalyst first flagged the incident on Telegram.
CoinDesk, CoinTelegraph, Decrypt9 August 2026
Coinsbuy temporarily suspends deposits and withdrawals following the breach. Attacker routes ~79% of funds through FixedFloat using ~50 single-use addresses; additional routing via ChangeNOW and BingX. Proceeds converted to Monero.
Crypto Briefing, CryptoTimes9 August 2026
ChangeNOW freezes a six-figure portion of stolen assets during the laundering process. Approximately $542,000 in ETH remains unmoved across five addresses.
CoinDesk10 August 2026
Multiple crypto news outlets including CoinDesk, Decrypt, CoinTelegraph, and Crypto.news publish reports on the breach. PeckShield and GoPlus Security publicly share on-chain analysis and suspected theft addresses.
CoinDesk, Decrypt, CoinTelegraph11 August 2026
Coinsbuy issues public statement confirming the breach, stating all affected client funds have been covered from company reserves. Company offers a $100,000 reward for information identifying perpetrators.
CoinTelegraphDecision Log
- slot 457937018 · hash BCD1T22XNYBxjPU1bgMMnZxET8Ek5xqCjGdjoDVRFoaj
- slot 457932198 · hash J51sKqmDa3BjbvXaDpsMti1fDYFLxpeYN9hwFpFnp5jp
- slot 457795206 · hash HUVnzmdz3qkqixdL8hwqCQuvsxXKY2uXUMYtfVT1Jhh4
- slot 443515974 · hash J9fRn2vNMLVxv9DqAx7nXsF17mfdvbAkUVSx7TgGLKd3
- slot 443515970 · hash 2wxMJZg2hdbHJ8c1EUriFRfSykPAw8r4ox7mBniBgbcE
- slot 443506979 · hash EcDpcN8UfrxP7mZ5hRxKBPb4JKjP4NGBm3KGngx8dTmw
This investigation is cryptographically anchored to the Solana blockchain (6 decisions). 14 of 16 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 8/11/2026, 12:04:11 PM
last updated: 10/17/2026, 6:27:59 AM
4 viewsavoid.net — verified advice for a post-truth world