According to CoinMeta, a B2B crypto payment processor experienced a theft of approximately $7.9 million from associated wallets on Ethereum and Binance Smart Chain. The attackers then laundered the funds through Monero / XMR, and transferred them via centralized exchanges such as ChangeNow, FixedFloat, and BingX. The processor's Coinsbuy X has been in dormant mode since 2020, yet its development documentation continues to be updated. The attack pattern is consistent with breaches of hot wallet private keys or administrator privileges. A release note on July 10, 2026, fixed an issue with unverified deposit amounts during transfers, highlighting the complexity of its transfer and fund integration logic, which poses a high risk. The addresses of the attackers include: 0x4d1bef2fe998b3e3c4029ef9ea6a0534d95661d3, 0x66790b54b891e2ebdef58a15b969ff6fb4374b17, and tvpx9xczrj6khenhhdjoqjzeqfmxdgubgr.