Threat watch / Attack
Unocoin: Indian crypto exchange suspends all services after its infrastructure was compromised
Unocoin, an Indian cryptocurrency exchange, says it detected unauthorised activity on November 6, 2026, and again on November 9, when it suspended all services. Its investigation found that its infrastructure "had been compromised". On November 12 it found outgoing transactions from one of the ETH addresses in its BitGo wallet infrastructure and says it does not yet have complete visibility into "all potentially unintended transactions". The root cause is not established. Unocoin is rebuilding its entire server infrastructure, which it expects to take 4 to 5 working days.
- Sector
- Finance
- Way in
- Not public yet
- Product or vendor
- None named
- How it happened
- Not public yet Checked 13 Nov 2026
- What was stolen
- Not public yet Checked 13 Nov 2026
- Who was impacted
- Unocoin's customers: all services are suspended while the exchange rebuilds its servers. Unocoin says more than 90% of the crypto it holds for customers is in cold storage and that "cryptocurrencies are not kept on any of our servers directly". The systems accessed and the information potentially exposed are still being investigated; no number of affected people is given.[1] Checked 13 Nov 2026
- Threat actor
- Not attributed
Timeline
- Unocoin detects unauthorised activity. Its enterprise accounts at Fireblocks and BitGo are frozen at 11:24 UTC and 11:29 UTC. At that point, it says, no loss of cryptocurrency funds had been identified. [1]
- Unocoin detects further unauthorised activity and suspends all services. Its investigation establishes that its infrastructure had been compromised. [1]
- Unocoin reports outgoing transactions from one of the ETH addresses in its BitGo wallet infrastructure, escalated to BitGo, which has opened an investigation into how they could have been executed. Unocoin says it cannot yet see all potentially unintended transactions, gives no amount, and will rebuild its whole server infrastructure in about 4 to 5 working days. [1]