According to CoinMeta, blockchain investigator Zachxbt pointed out that after the security incident in July 2025 at the Indian exchange Coindcx, the deposit address tqkjq was still being used by a liquidity provider for 10 months, and user deposits continued to be gathered into hot wallets. As a result, $15.8 million in user deposits went untraced. Coindcx responded to this by claiming that user funds were safe, stating that such claims were misleading, and that the transactions in question originated from an old wallet address that was created in January 2025 and leaked in July 2025.