Skip to content
Blockchain Posts

infrastructure

CoinDCX halts new futures bets after Binance hack cuts off its liquidity source

India's CoinDCX put its futures market in reduce-only mode after the Oct 29 Binance incident disrupted its unnamed liquidity provider. Deposits, withdrawals and spot trading remain live.

by 4 min read
exchangecoindcxbinanceinfrastructureindia

CoinDCX, India's largest crypto exchange by user count, placed its futures market in reduce-only mode overnight after the Oct 29 Binance security incident disrupted its liquidity-provider link. The exchange says deposits, withdrawals and customer funds are unaffected; a CoinDCX spokesperson confirmed to CoinDesk that the liquidity provider in question is Binance.

What happened

CoinDCX announced on X in the early hours of Oct 30 that it was pausing the opening of new long or short positions on its futures platform. In reduce-only mode:

  • No new positions can be opened.
  • Existing positions cannot be increased.
  • Users can close positions, reduce exposure, add margin, and cancel orders normally.
  • Spot trading, deposits and withdrawals continue.

The exchange tied the move to a "temporary disruption at a liquidity provider" and did not name the counterparty in its public statement. CoinDesk's Omkar Godbole reports that a CoinDCX spokesperson identified the provider as Binance — a point not independently stated by The Defiant, so it rests on CoinDesk's single-sourced quote.

Why it matters

CoinDCX runs its futures book as a Binance-routed market: price discovery, order matching and liquidity sit upstream at Binance, while CoinDCX handles the user-facing exchange, Indian rupee rails, and compliance. When Binance suspended withdrawals and deposits in response to the $6.3B hot-wallet drain, the pipe CoinDCX relies on to hedge inventory on new futures orders went offline. Reduce-only is the standard operational response: it stops the exchange from opening fresh exposure it cannot immediately hedge.

Comparable moves have surfaced across the market in the hours since the Binance drain. The Defiant reports that Aave V3 on Ethereum mainnet froze the markets attacker addresses had been active in; Kamino paused its SOL/BTC market; Ethena and other issuers temporarily paused their routes through Binance. The CoinDCX halt is the first retail-exchange-level contagion to be publicly announced.

Scale

  • CoinDesk cites CoinGecko data showing CoinDCX's combined spot and futures 24h volume at approximately $1 million going into the halt — a figure that reflects both the exchange's size and the fact that trading had already slowed before the pause.
  • CoinDCX itself has been through this cycle before: in July 2024, the exchange suffered a $44.2M hot-wallet theft also attributed to the Lazarus Group. That incident was absorbed from the company's treasury rather than user balances. The current pause is markedly less severe — no funds are at risk, only a service is degraded.

Attribution for the upstream event

Blockchain-analysis firms Chainalysis and TRM Labs have publicly linked the Binance drain to North Korea's Lazarus Group (TRM uses the sub-cluster label TraderTraitor). No U.S. government or court has issued a formal attribution as of this writing. CoinDCX's own statement does not comment on the attacker.

What to watch

  1. Timeline for Binance withdrawals to resume. Co-CEO Yi He has pledged a 48-hour window; until that lands, CoinDCX futures stay reduce-only.
  2. Whether other India-regulated venues follow. WazirX, Mudrex, and Zebpay have not announced parallel moves at the time of writing; several route liquidity through Binance or Bitget.
  3. CoinDCX's own disclosure of its hedging model. The spokesperson's identification of Binance as the liquidity provider is a one-line admission; a fuller post from the exchange about counterparty exposure, especially given 2024's Lazarus incident, would be the responsible follow-up.

Context — exchange-of-exchanges contagion

The last time a comparable "my exchange's liquidity went offline" moment hit was the November 2022 FTX collapse, which took down a long tail of smaller venues that routed order flow or treasuries through it. The CoinDCX halt is narrower — Binance remains solvent, is covering the loss from SAFU and equity, and has promised a 48-hour withdrawal reopening — but it demonstrates the same brittle shape: retail exchanges that pitch themselves as independent markets are, for liquidity purposes, thin wrappers around a handful of global books. When one of those books goes dark, the wrappers have to pause too.

Sources

Related stories