Key Takeaways
- Unocoin confirmed unauthorized server access and suspended customer logins following security incidents on Nov. 6 and Nov. 9.
- Arkham Intelligence displays approximately 80,986 Unocoin-linked addresses with a combined portfolio value of $0, although no large-scale theft has been independently verified.
- Unocoin is investigating outgoing transactions while maintaining that more than 90% of customer cryptocurrency funds reside in cold storage.
Founded in 2013, Bengaluru-based Unocoin ranks among India’s earliest cryptocurrency exchanges. Its latest security troubles have raised uncomfortable questions about custody, infrastructure vulnerabilities, and the reliability of publicly tracked wallet balances.
The trouble began Nov. 6, when Unocoin detected unauthorized activity and requested freezes on its Fireblocks and Bitgo enterprise accounts at 11:24 UTC and 11:29 UTC, respectively. Both custody providers reportedly confirmed the restrictions, with no losses identified at that stage.
Three days later, additional suspicious activity prompted Unocoin to publish an update and suspend services and disable customer logins. The company acknowledged compromised infrastructure but reiterated that “no cryptocurrency funds have been lost.”
On Thursday, blockchain monitoring account Onchain Lens highlighted an unusual reading on Arkham Intelligence’s Unocoin dashboard. Approximately 80,986 attributed addresses displayed a collective valuation of $0, accompanied by the message “No assets found.” Bitcoin.com News can confirm that Arkham’s dashboard shows the Unocoin entity with nearly 81,000 empty wallets.

Arkham screenshot on Nov. 12, 2026.
The observation immediately invited speculation about a possible exchange drain. However, Arkham’s address attribution does not necessarily represent Unocoin’s complete custody arrangements, particularly if assets were transferred to previously unidentified wallets.
Several explanations remain plausible. Funds could have been relocated into untracked cold-storage addresses, transferred defensively via a white hat hacker following the intrusion, or moved without authorization. The available evidence does not establish which scenario occurred.
Crucially, a zero balance across labeled addresses does not demonstrate that 81,000 customer wallets were emptied by malicious attackers. Furthermore, a look at the historical data shows that the wallets had only collectively held hundreds of dollars’ worth of crypto at most over the last month, with a three-month peak just above $250,000.
Unocoin’s Nov. 12 security update introduced another unresolved complication. Investigators identified outgoing transactions from an Ethereum address associated with its Bitgo wallet infrastructure, previously used to fund ERC-20 token activity.
The exchange escalated those transactions to the crypto custodian Bitgo for investigation. However, frozen enterprise accounts and limited visibility into Bitgo’s change-address mechanisms have complicated efforts to reconstruct the complete movement of assets.

Image source: Unocoin blog.
Unocoin says it is rebuilding its server infrastructure, a process expected to require four to five working days. Meanwhile, customer logins, trading, and withdrawals reportedly remain unavailable, with website visitors also reporting Cloudflare 504 Gateway Timeout errors.
The episode follows previous security incidents involving Indian exchanges, including Wazirx and CoinDCX, making independent verification particularly important.
For now, the essential questions concern transaction authorization, confirmed custody balances, possible data exposure, and service restoration. Until investigators reconcile Unocoin’s holdings with onchain evidence, neither the company’s assurances nor Arkham’s empty dashboard can conclusively establish the financial outcome.
免责声明:本文章仅代表作者个人观点,不代表本平台的立场和观点。本文章仅供信息分享,不构成对任何人的任何投资建议。用户与作者之间的任何争议,与本平台无关。如网页中刊载的文章或图片涉及侵权,请提供相关的权利证明和身份证明发送邮件到[email protected],本平台相关工作人员将会进行核查。