Coinsbuy lost $8 million in an attack spanning TRON and Ethereum early on 10 August 2026, with forensic analysis tying the activity on both networks to a single actor. Investigators traced the stolen assets through intermediary addresses and into FixedFloat, a non-custodial exchange that allows small swaps without KYC (identity checks), limiting options to freeze funds once transactions settle. The intrusion method remains unknown, with no official confirmation of whether the breach involved a private key leak, a smart contract (self-executing blockchain code) flaw, insider activity or hot wallet manipulation. The case underscores how attackers are increasingly coordinating across multiple blockchains, exploiting gaps in cross-chain monitoring as exchanges integrate more networks.