Polylog
← Trends

Exchange Back-Office Infrastructure Becomes the Main Theft Target

Large losses at centralized exchanges increasingly come from neglected operational systems, such as retired wallets, sweep services and third-party security software, rather than from the main custody stack, so exchange breaches will keep recurring until proof of reserves and operational audits cover the back office.

forming · confidence 40 · Emerging (watchlist) · tracking since October 26, 2026 · updated October 26, 2026

Sign in to get threshold and movement alerts for this trend.

Why the conviction moved

  • Oct 26
    Strengthened +4

    Indian exchange CoinDCX admitted a $15.99M USDT loss after its CEO had called the reports a false alarm. It blamed a failure in its automated deposit-sweep service that left customer deposits on decommissioned wallet addresses, and it will absorb the loss. This is a back-office failure in retired wallets and sweep services, exactly the systems the thesis names, and the initial denial shows that proof of reserves doesn't cover them.

  • Oct 26
    Context

    The attacker behind Bitget's $387.5M theft moved $19.48M between Oct. 21 and Oct. 24. This keeps exchange-theft losses in circulation, but the report doesn't say whether the original breach came through back-office systems.

Source trail

  • Context · October 26, 2026

    Bitget Hacker Resumes Laundering as October's Security Roundup Adds Ledger Implants and Balancer's Wind-Down

    The attacker behind Bitget's $387.5M theft moved $19.48M between Oct. 21 and Oct. 24. This keeps exchange-theft losses in circulation, but the report doesn't say whether the original breach came through back-office systems.

    Rekt News (Bitget)

  • Supporting · October 26, 2026

    CoinDCX Admits $15.99 Million USDT Loss From Retired Wallets After Chief Executive Called Reports a False Alarm

    Indian exchange CoinDCX admitted a $15.99M USDT loss after its CEO had called the reports a false alarm. It blamed a failure in its automated deposit-sweep service that left customer deposits on decommissioned wallet addresses, and it will absorb the loss. This is a back-office failure in retired wallets and sweep services, exactly the systems the thesis names, and the initial denial shows that proof of reserves doesn't cover them.

    crypto.news

Unlock full source trail, score history, and daily updates.

Unlock Trends

Townsquare

Argue the thesis in Townsquare.