CoinDCX

1.1 Identity and business model

CoinDCX is consistently described as a Mumbai-based cryptocurrency exchange founded in 2018. Its consumer app markets spot trading, futures, options, crypto SIPs, INR funding, and tax-reporting integration, positioning the business as an all-in-one trading and investment platform rather than a single-product broker. The Google Play copy is company-issued even though it is hosted by Google, so it establishes offered functionality and management's current positioning but does not independently verify adoption or service quality. Multiples describes a commission-led, privately held exchange serving retail and institutional users. Together, the evidence supports the exchange model, but it does not disclose the current revenue mix across trading commissions, deposit or withdrawal fees, listings, or other services.[CO001, CO002, CO009, CO010]

1.2 Leadership and governance

Public profiles identify Sumit Gupta as co-founder and CEO and Neeraj Khandelwal as co-founder. The assigned evidence does not establish a complete current executive roster, board composition, ownership structure, or succession plan, so founder-market fit can be described only at the level of role continuity rather than independently verified operating depth. A listing-services provider says CoinDCX evaluates token applicants across business model, technology, team, market position, token utility, traction, and financial structure. That supplier-authored description indicates the breadth of governance information expected from listed projects; it is not evidence that CoinDCX itself publicly meets an equivalent disclosure standard. Primary group-structure and board records remain necessary.[CO003, CO004, CO016]

1.3 Capital, scale, and stakeholders

CoinDCX has clear access to institutional capital, but the public financing record is not internally consistent. FundedIQ reports $228 million across three rounds, Lapaas reports $245 million across seven tracked rounds, and Multiples and TexAu report $247 million. The April 2022 Series D is reported at either $135 million or $136 million depending on the dataset. More recent secondary sources place the company at a $2.45 billion post-money valuation after an October 2025 investment, but the amount invested is not disclosed in the retained evidence. Company-issued app copy claims more than two crore Indian users and over ₹2.44 lakh crore in quarterly trading volume, while headcount sources diverge sharply. None of these figures should be treated as current audited revenue, cash available, or independently verified usage.[CO005, CO006, CO007, CO008, CO009, CO010, CO011]

1.4 Milestones and adverse signals

The operating trajectory runs from a 2018 founding through multiple financing rounds, a 2021 unicorn valuation, the 2024 BitOasis acquisition, and an October 2025 investment reported at a higher valuation. That growth record is counterbalanced by control failures. AInvest reports that a July 2025 malware incident led to a roughly $44 million loss from an internal liquidity wallet, followed in 2026 by a roughly $15.99 million loss after a deposit-sweeping control for retired addresses failed. The article says the company absorbed the later loss and credited affected users, but this is a balance-sheet response rather than independent assurance that custody controls were remediated. Archived Trustpilot reviews also repeatedly describe withdrawal restrictions, deposit verification delays, and weak support; these anecdotes identify diligence themes but cannot measure their incidence across the customer base.[CO012, CO013, CO014, CO015]

1.5 Exhibits

2.1 Market boundary and substitutes

The relevant market is not “all crypto” and should not be sized from a single global headline. For CoinDCX, the core boundary is Indian retail and active-trader access to crypto assets through an INR-linked centralized exchange, including spot, derivatives, options, recurring investment, custody or wallet functionality, and compliance support. The Google Play listing describes access to 500+ crypto assets, global futures, US stocks, SIPs, INR deposits and withdrawals, and quarterly proof of reserves, while its disclaimer says crypto products are unregulated and may have no regulatory recourse. That creates a market with both transaction-fee demand and trust/compliance demand. Adjacent spend includes Web3 wallet, stablecoin and tokenization services; excluded from the core estimate are the full value of underlying tokens, unrelated global exchange volume, and investment returns. Direct substitutes include other Indian exchanges and global platforms; decentralized exchanges, peer-to-peer trading, self-custody, and simply holding assets are additional substitutes. The market boundary is therefore a service-revenue market, not a measure of customer assets or token capitalization.[CM001, CM002, CM003, CM004]

2.2 Sizing lenses and what remains unproven

Evidence supports multiple sizing lenses but not a reliable CoinDCX-specific TAM, SAM, or SOM. The company app listing provides a company-claimed user and activity lens: “2.0 Crore+ Indians” and “₹2.44L Cr+ Qtrly Trading Volumes”; these are platform claims and do not establish active users, fee revenue, take rate, or market share. The Hindu separately reports that CoinDCX’s website said it had over 1.6 crore registered users, showing both a large disclosed scale and a metric-definition discrepancy that must be preserved rather than averaged. A third-party SWOT page estimates 15M+ registered users and says Indian crypto penetration is below 15%, but presents no transparent methodology; it is directional, not a valuation-grade market estimate. A second lens is product breadth: spot, futures, options, SIPs, passive earnings, and Web3 access expand monetizable workflows, while a third lens is institutional and tokenization demand. The missing bridge is the denominator: India’s active, compliant, fee-paying trading population, wallet balances, volume, and achievable share by product are not established in the assigned evidence.[CM004, CM005, CM006, CM008, CM009]

2.3 Buyer, user, and payer segmentation

CoinDCX’s demand is segmented by workflow rather than by one homogeneous “crypto user.” Retail investors need onboarding, education, simple spot access and recurring purchases; active traders need liquidity, leverage, derivatives, transparent fees and reliable execution; high-net-worth individuals, family offices and emerging institutions need controls, custody, reporting and policy confidence; and Web3 users need wallet, token and decentralized-application access. The app listing directly supports the first two workflows through low minimums, SIPs, futures, options and advanced order management. The SWOT source identifies institutional services and family offices as an opportunity, but that is an analyst-style assertion rather than evidence of current budget ownership or conversion. In this market the user and payer are often the same retail account holder, while an institution’s trading, treasury, compliance and risk functions can split user, approver and budget owner. Adoption triggers are simpler INR access, acceptable tax treatment, liquidity, security assurance, and confidence that withdrawals and support will work.[CM010, CM011, CM012, CM013]

2.4 Adoption drivers, constraints, and valuation relevance

Adoption is governed by a tension between product expansion and institutional trust. The Crypto Times reports that CoinDCX expects regulatory clarity, stablecoin adoption and tokenization to influence 2026 demand, and quotes Sumit Gupta saying “tokenization is a big theme…we see more and more adoption happening in stablecoins and crypto in general in 2026, not just in the US but many other countries also.” Those are company-linked outlook statements, not independent forecasts. The Hindu documents the opposite friction: CoinDCX restricted crypto withdrawals for safety and compliance reasons, users saw conflicting information, and a KYC/PAN downtime alert appeared during a period of elevated support volume. CryptoBriefing reports a roughly $16 million operational loss after a failed sweeping service and notes a prior 2025 hack, while Trustpilot contains anecdotal complaints about withdrawals, support and fees; neither establishes a population-wide failure rate, but both identify trust as a material adoption constraint. Regulation, tax, liquidity, security, service reliability and switching costs therefore matter more to valuation than raw registered-user scale. The assigned evidence does not establish retention, active users, take rate, contribution margin, or conversion from retail to higher-value segments.[CM014, CM015, CM016, CM017]

2.5 Exhibits

3.1 Landscape and positioning

CoinDCX's competitive set is layered rather than a single peer group. A public fintech review places WazirX, ZebPay, and Bitbns in its domestic comparison set, while describing Okto as indirectly competing with Binance and Coinbase Wallet for cross-border Web3 use cases. The same source describes CoinDCX as spanning beginner access, advanced trading, and institutional/HNI services. CoinDCX's own app listing supports the breadth claim with 500+ cryptocurrencies, 300+ futures pairs, options, global futures, SIPs, and Web3 access to more than 50,000 tokens. This is a breadth-led position, not proof of superior liquidity, execution, or economics. The relevant substitutes also include keeping assets in a self-custody wallet, using a global exchange, or not trading at all.[CP001, CP002, CP003, CP004]

3.2 Buyer-facing comparison

The buying decision is likely segmented by user sophistication and trust requirements. The assigned evidence describes a simplified retail mode, professional tools, institutional/HNI services, and a Web3 wallet, while the interview guide describes operational roles covering trade operations, customer queries, reporting, and risk management. These signals support a multi-product operating model, but they do not establish realized customer mix, switching rates, or competitor win rates. For a buyer, supported local access and product breadth may reduce the need to multi-home; however, the same breadth increases the surface area for wallet, support, and compliance failures.[CP005, CP006, CP007, CP008]

3.3 Durability, displacement, and evidence gaps

Trust and operational reliability are the clearest durability tests in this pool. Economic Times reported that the July 2025 breach targeted an internal liquidity account, while CoinDCX said customer funds were segregated and that it would absorb the loss. In October 2026, Crypto Briefing reported a roughly $16 million loss linked to deprecated wallet infrastructure and an automated sweeping failure; CryptoPotato quoted the company's statement that the loss was absorbed and customer balances were accounted for, while also recording the earlier denial that wallets had been breached. Trustpilot's archived page contains low-rated user reports about withdrawal restrictions, support delays, and trading-cost disputes. These are not controlled benchmarks, but they are adverse signals against a trust-based moat. The pool does not disclose competitor fees, liquidity depth, uptime, institutional contracts, or independently measured switching costs, so moat durability remains an open diligence question.[CP009, CP010, CP011, CP012]

3.4 Exhibits

4.1 Revenue model and monetization

CoinDCX's visible monetization is primarily transaction-led: the available private-market profile labels its revenue model as commission, while the product surface describes spot, futures, options, leverage, staking and recurring investment products. This creates multiple opportunities to monetize trading activity, but the sources do not disclose the realized fee schedule, net take rate, spread capture, revenue mix, or the share of revenue from non-trading products. Official app copy is list-level product positioning, not recognized revenue. The 2022 revenue figure reported by third-party databases is explicitly described as revenue or ARR recorded alongside a funding round, and may be run-rate or LTM; it should not be treated as current ARR. Consequently, the commercial model is plausible and diversified by product surface, but revenue quality remains unverified until management provides monthly net revenue by stream, customer cohort and geography.[CI001, CI002, CI003, CI004]

4.2 Activity, operating leverage and cost drivers

Public activity signals are large but do not bridge directly to earnings. The app listing claims more than two crore Indian users and more than ₹2.44 lakh crore of quarterly trading volume, while Multiples records $141 million of revenue alongside the April 2022 Series D and describes the figure as a run-rate or LTM value. These measures have different denominators and periods, so an implied revenue-per-user or take rate would be misleading. The operating cost base is also opaque: public sources do not provide gross margin, cloud and custody costs, liquidity rebates, customer acquisition cost, support cost, compliance staffing, chargebacks, or wallet-loss provisions. For a centralized exchange, liquidity, security, compliance and customer support are structural service-delivery costs, and the legacy-wallet loss linked to a wallet abandoned after a 2025 security incident demonstrates that operational risk can become a direct financial charge. The right efficiency test is therefore net revenue after liquidity and incentive costs, loss-adjusted operating margin, and recurring compliance/security spend.[CI005, CI006, CI007, CI008]

4.3 Capital adequacy and underwriting verdict

The last clearly documented priced financing in the assigned evidence is the $135 million Series D in April 2022 at a $2.1 billion valuation in Multiples, with EquityZen separately describing the company as privately held and withholding current valuation and financial detail behind accreditation access. A later Republic portfolio update reports a Coinbase investment at a reportedly $2.45 billion valuation, but it does not state the investment amount, cash balance or use-of-funds schedule. The evidence therefore supports financing access and strategic investor interest, not a quantified runway. Phemex reports a $15.99 million USDT loss tied to a compromised legacy wallet and says CoinDCX credited affected users and continued operations; even if customer assets were unaffected, the event is a material test of treasury resilience and controls. A finance diligence package should obtain current cash and restricted cash, monthly burn, debt and contingent liabilities, incident remediation costs, insurance recoveries, and the next-round trigger. On current evidence, revenue potential is credible but underwriting confidence is low because current profitability, liquidity and capital adequacy are not disclosed.[CI009, CI010, CI011, CI012]

4.4 Exhibits

5.1 Product surface and customer workflow

The observable product is an integrated crypto trading and investing surface rather than a single exchange screen. The Google Play listing describes INR deposits and withdrawals, automated KYC, spot trading, futures wallets, cross-margin, options, global futures, crypto SIPs, tax-reporting integration, and unified Go/Pro modes. It also claims access to 500+ cryptocurrencies and 300+ futures pairs, while separately describing 1,000+ curated spot assets and 50,000+ tokens or pre-launch tokens. Those counts are company-published app-store claims with different scopes, not a reconciled inventory. The customer workflow therefore appears to run from onboarding and KYC through funding, order entry, execution, portfolio tracking, and reporting, but the public record does not establish how availability, eligibility, or liquidity differs by product, jurisdiction, or account tier.[CE001, CE002, CE003, CE004]

5.2 Operating model and technical evidence

CoinDCX exposes a developer surface through an official GitHub repository for REST API documentation, with instructions to generate API keys through the company API dashboard and to read documentation at docs.coindcx.com. A third-party integration article describes the API as supporting market data, order execution, account information, WebSockets, and more than 200 markets, but it is also marketing an alternative integration product and should not be treated as independent verification of every capability. A CoinDCX engineering job repost provides a useful signal about the problems the team is hiring to solve: large-scale consumer web applications, shared frameworks and SDKs, frontend performance, observability, web security, and integration across frontend, backend, and platform services. None of these sources disclose the backend topology, custody controls, matching-engine design, SLOs, test evidence, or production incident metrics.[CE005, CE006, CE007, CE008]

5.3 Maturity, dependencies, and implementation risk

The product appears mature at the surface layer: the app listing describes multiple trading products, high leverage, automated onboarding, charting, order management, and tax integration, while the API repository is public and the job specification calls for reusable UI components, scalable architecture, security practices, and performance optimization. However, breadth also increases dependency exposure. Third-party clone vendors describe the exchange pattern as a combination of wallet integration, KYC/AML, matching, liquidity routing, and settlement; those descriptions are competitor marketing, not proof of CoinDCX internals, but they identify the control points an investor should test. The Trustpilot sample contains complaints about delayed withdrawals, unresolved deposit verification, and support responsiveness. These are self-selected reviews and do not establish incident frequency, yet they make operational support and funds-access workflows material diligence topics alongside the unverified security and reliability controls.[CE009, CE010, CE011, CE012]

5.4 Differentiation, trust controls, and diligence gaps

The strongest public differentiation signals are product breadth, a stated liquidity aggregation model, and a developer-accessible API surface. The job listing also indicates attention to frontend security concepts such as CORS, CSP, CSRF, and XSS, but a hiring requirement is not evidence that controls are implemented or independently tested. The app listing claims FIU compliance, ISO/IEC 27001:2022, quarterly proof-of-reserves reporting, and insurance protection; these should be verified against certificates, scope statements, report dates, exclusions, and entity coverage. Public sources do not establish custody segregation, key-management design, reconciliation frequency, withdrawal controls, disaster recovery, uptime, penetration-test results, or roadmap delivery. The underwriting conclusion is therefore a capable and broad product surface with meaningful evidence gaps around the trust boundary where technical failure becomes customer loss.[CE013, CE014, CE015, CE017]

5.5 Exhibits

6.1 Customer segments and adoption

Available evidence describes CoinDCX primarily as a retail crypto investment and trading platform spanning newer investors, active spot traders, futures traders, and a historically referenced institutional segment. Business Standard reported 22 million registered users in H1CY26, up from 19 million in H1CY25, while average investor age moved from 29–30 to 30–31. The same report said average tokens per trader were five. CoinDCX's Google Play listing separately markets the app to more than 2.0 crore Indians, but that company-issued figure is not a funded, active, retained, or fee-paying customer count. A stale secondary case study said 90% of users came from Tier-I and Tier-II cities, without disclosing a methodology. These sources establish broad reach, not current cohort quality or segment economics.[CU001, CU003, CU004, CU010, CU015, CU016]

6.2 Adoption trajectory and conversion proof

CoinDCX has measurable product-conversion evidence, but it is campaign-level rather than a complete retention funnel. Plotline, a supplier to CoinDCX, says the growth team launched more than 20 in-app campaigns over three months. It reports that 10% of exposed new users made a trade, 30% more exposed users started trading futures, and about 45% of users targeted by a six-step walkthrough started their first trade. These figures identify an exposed population and an action, but the case study does not disclose control groups, absolute sample sizes, revenue per user, or post-campaign persistence. Business Standard's H1CY26 figures reinforce that caution: registered users grew while total traded value fell from ₹23,497 crore to ₹14,664 crore. Reach and activation therefore should not be read as durable engagement.[CU001, CU002, CU005, CU006, CU007, CU008, CU009]

6.3 Named proof, durability, and customer risk

Public named-customer proof is limited. The strongest production-like evidence is a named CoinDCX growth leader describing measured first-trade and futures outcomes, but it is a supplier-hosted case study rather than an independently audited customer reference. CoinDCX's Google Play listing claims broad customer reach and substantial quarterly trading volume; neither figure discloses active users or retention. Trustpilot's fetched page provides adverse, user-generated accounts involving withdrawals, deposit verification, liquidation, fees, delistings, and support responsiveness. These self-selected complaints are not a representative churn study, but they identify trust and service issues that customer data should test. Crypto Briefing also reported a roughly $16 million operational wallet loss in 2026; CoinDCX said affected users were credited and trading continued. No retained source establishes GRR, NRR, churn, renewal, contract length, concentration, or channel dependence.[CU006, CU007, CU008, CU010, CU011, CU012, CU013, CU014]

6.4 Customer diligence implications

The customer thesis is strongest on reach and the ability to move users through first-trade and futures-product journeys, not on durable economic engagement. Underwriting should separate registered accounts from funded accounts, monthly active traders, first-time traders, repeat traders, and fee-paying customers, then reconcile each cohort to traded value and revenue. It should test whether campaign lifts persist and whether support, withdrawal, liquidation, and wallet incidents increase churn or move deposits off-platform. The H1CY26 decline in traded value despite user growth makes traded value per registered user a key monitor. The evidence is also silent on top-account, geography, acquisition-channel, and institutional-versus-retail concentration, so no durable expansion or concentration conclusion is supportable from public data.[CU001, CU002, CU007, CU009, CU012, CU013, CU014, CU016]

6.5 Exhibits

7.1 Custody, security, and operational control

The highest-severity risk is not a proven loss of customer balances in the reviewed evidence, but the control gap between wallets classified as retired and wallets that continued receiving deposits. Crypto.news reported that CoinDCX acknowledged a 15.99 million USDT loss after a failed automated sweeping service allowed deposits to accumulate at an old address following the July 2025 breach; the company said it absorbed the loss and that customer balances and active trading systems were unaffected (CR005). A separate account described the same event as an operational loss and reported that blockchain analysts found activity at addresses labeled retired (CR016). Crypto.news also reported 40 affected addresses, approximately 9.63 million dollars traced to exchange-associated deposit addresses, and a 2.21 million dollar USDT freeze, but did not establish how the private keys were obtained or whether the missing assets were recovered (CR008). The evidence supports a severe residual custody and change-management risk, not a conclusion that customer funds were lost. The immediate control test is a reconciled inventory of every legacy address, a signed deprecation control, and independent proof that deposits to retired infrastructure cannot remain operational.[CR005, CR006, CR008, CR016]

7.2 Regulatory perimeter and customer access

Regulatory registration reduces some compliance uncertainty but does not establish compensation protection, withdrawal timeliness, or resilience in every customer jurisdiction. BrokerRank describes CoinDCX as holding one FIU license, with no compensation scheme and no fund-segregation protection stated in its comparison fields (CR011). That is a third-party description and should be verified against the regulator's own register and CoinDCX's legal entities; it is not evidence that the FIU registration is invalid. The company-controlled Google Play listing instead says the platform is FIU compliant, ISO/IEC 27001:2022 certified, and publishes quarterly proof-of- reserves reports (CR002). Those controls are useful signals, but the listing does not disclose scope, audit opinion, liability coverage, or the treatment of legacy-wallet exceptions. AInvest reported delayed crypto and INR withdrawals and said CoinDCX attributed restrictions to safety and compliance reasons (CR003). Trustpilot contains customer reports of withdrawal restrictions lasting more than 20 days and unresolved deposit verification (CR014, CR015). These reports are not a measured incident rate, yet they make exit access and support responsiveness material risk indicators during periods of compliance review or market stress.[CR002, CR003, CR011, CR014, CR015]

7.3 Risk governance, liquidity, and financial resilience

CoinDCX's own hiring materials indicate that several second-line controls are being formalized rather than providing evidence that the target state is already operating. The Levels.fyi posting for an AVP/Director of Financial and Liquidity Risk assigns ownership of margin and liquidation parameters, counterparty concentration, liquidity coverage, client-fund segregation review, and proof-of-reserves processes (CR009). It calls for quarterly liquidity stress tests and a 72-hour stressed-withdrawal horizon model, and describes the first three months as establishing a baseline of current exposures and controls (CR010). That is a meaningful mitigation plan, but a job specification is company-issued evidence of intended scope, not proof of completed implementation or independent assurance. The financial risk is therefore model and execution risk: a fast market move, bank or stablecoin counterparty problem, or concentrated liquidity dependency could expose gaps before the proposed monitoring cadence is demonstrably live. The practical kill criterion is a failed reconciliation, an unmodeled bad-debt event, or a stressed-withdrawal horizon below the board-approved floor; diligence should request dated test outputs, exception logs, counterparty limits, and board sign-off.[CR009, CR010, CR005, CR008]

7.4 Monitoring and thesis-break triggers

The risk posture should be monitored through observable control outcomes rather than broad assurances. A repeated withdrawal restriction without a documented reason and service-level resolution path would convert a customer-support warning into a liquidity and conduct concern (CR003, CR014). A second incident involving a deprecated address, an unreconciled custody exception, or a failure to distinguish customer liabilities from operating assets would materially weaken the claim that segregated custody contains platform losses (CR005, CR006, CR016). The proposed risk role gives a concrete framework for monitoring: margin and liquidation backtests, counterparty exposure matrices, a proof-of-reserves cycle, and fiat custody adequacy reviews (CR009, CR010). Until dated outputs are supplied, those items remain diligence asks rather than completed mitigations. The investment thesis should be paused if CoinDCX cannot evidence the control owners, frequency, exceptions, and remediation dates for these tests, or if regulatory restrictions prevent customers from accessing assets within the stated operating policy.[CR003, CR005, CR006, CR009, CR010, CR014, CR016]

7.5 Exhibits

8.1 Financing context and entry discipline

CoinDCX's financing history demonstrates access to institutional crypto capital, but not that a new investor should accept the latest headline price. TechCrunch reported a $135 million Series D at a $2.15 billion post-money valuation in April 2022, while FinTech Futures reported the preceding $90 million Series C at $1.1 billion in August 2021. Tracxn and Clay now identify an October 2025 Coinbase investment at a $2.45 billion post-money valuation with an undisclosed check size. That mark is only about 14% above the 2022 headline valuation, which is a modest reset across more than three years rather than evidence of a current intrinsic value. Public aggregators place disclosed cumulative funding around $244.9 million to $247 million, but funding raised is not cash available. The retained material does not disclose the fully diluted cap table, liquidation preferences, secondary components, debt, current cash, or the BitOasis purchase price. Entry discipline therefore requires primary deal documents and audited operating evidence, not interpolation from a private round.[CV001, CV002, CV003, CV004, CV006, CV014, CV015, CV016]

8.2 Thesis, anti-thesis, and scenarios

The thesis rests on distribution, breadth, and strategic reach. CoinDCX's app listing claims more than two crore Indian users, more than 500 crypto assets, and ₹2.44 lakh crore of quarterly trading volume, while independent coverage reports the 2024 acquisition of BitOasis as a route into MENA. Those signals could support a larger exchange franchise if activity converts into durable, compliant revenue. The anti-thesis is equally material. TechCrunch documented the adverse volume effect of India's 1% tax deducted at source in 2022; Trustpilot's retained sample contains repeated withdrawal and support complaints; and Crypto Briefing reported an approximately $16 million operational loss linked to retired wallets in October 2026. A market-data vendor's recorded $141 million revenue and 15.2x 2022 multiple are historical and ambiguously defined as run-rate or LTM, so they cannot anchor a current valuation. The scenarios below are conditional decision frameworks, not forecasts or appraisals.[CV005, CV007, CV008, CV009, CV010, CV011, CV012, CV013, CV016]

8.3 Recommendation, exit readiness, and diligence

Recommendation: research-more. Confidence is medium, risk is high, and valuation stance is unknown because the evidence supports neither an attractive nor an expensive entry conclusion at a specified security price. CoinDCX has demonstrated fundraising access, a large company-claimed user footprint, product breadth, and geographic ambition. However, the latest private mark is not accompanied in the retained public evidence by current audited revenue, contribution margin, customer activity, custody liabilities, cash, incident reserves, or ownership terms. The 2026 wallet loss and recurring service complaints increase the proof burden around controls and customer trust. Exit readiness is also unproven: there is no retained evidence of audited public-company controls, a defined liquidity window, or an observable M&A benchmark for the BitOasis transaction. A diligence-ready decision requires audited FY2025-FY2026 financials, monthly active funded users, cohort revenue and retention, incident remediation, cap-table and preference detail, and a board-approved liquidity plan.[CV002, CV003, CV008, CV009, CV010, CV011, CV012, CV014, CV016]

8.4 Exhibits