# India’s Unocoin Confirms Server Breach Amidst Empty Wallet Reports Veteran exchange Unocoin reports unauthorized server access while blockchain data shows thousands of zero-balance wallets. - **Source:** [Bitcoin News](https://brifing.si/source/d8aeaf1e-9839-4dad-9d25-7a6bf3fbeef8) - **Published:** 2026-11-12 - **Topic:** [Finance](https://brifing.si/c/finance) - **Original article:** - **On Brifing:** https://brifing.si/s/b7666ac5-ede5-4831-990d-89b337d0cf20 ## Unauthorized Server Access Confirmed Bengaluru-based cryptocurrency exchange Unocoin officially acknowledged a security breach following unauthorized server access detected on November 6 and November 9. The platform responded by suspending all customer logins and trading services. While the company maintains that no customer funds have been lost, the incident has triggered significant scrutiny regarding their internal security infrastructure. ## Empty Wallets Spark Speculation Blockchain monitoring platform Arkham Intelligence currently displays approximately 80,986 Unocoin-linked addresses with a collective balance of zero. This observation led to widespread speculation regarding a potential exchange drain. However, experts note that these labeled addresses may not represent the entirety of the exchange's custody arrangements or its actual total holdings. ## Custody Providers and Asset Safety Unocoin utilized Fireblocks and Bitgo as enterprise custody providers to manage assets. Upon detecting suspicious activity, the exchange requested immediate freezes on these accounts at 11:24 UTC and 11:29 UTC on November 6. The company claims that over 90% of customer cryptocurrency funds remain safely stored within secure cold storage environments. ## Historical Context of Wallet Balances Historical onchain data suggests the 81,000 empty wallets identified by Arkham did not hold significant capital prior to the breach. These addresses collectively held only hundreds of dollars in recent months, with a three-month peak valuation just above $250,000. This data indicates that the empty status may not reflect a massive theft. ## Investigation of Outgoing Transactions Investigators identified outgoing transactions originating from an Ethereum address associated with Unocoin’s Bitgo infrastructure. These movements, previously used for ERC-20 token activity, have been escalated to Bitgo for a formal investigation. Limited visibility into Bitgo’s specific change-address mechanisms currently complicates efforts to fully reconstruct the movement of these digital assets. ## Infrastructure Rebuilding and Downtime Unocoin is currently in the process of rebuilding its compromised server infrastructure, an operation expected to span four to five working days. During this period, customer logins, trading, and withdrawals remain completely unavailable. Website visitors have also reported encountering Cloudflare 504 Gateway Timeout errors while attempting to access the exchange's official platform. ## Broader Indian Crypto Security Landscape This security incident follows a series of previous breaches involving other prominent Indian cryptocurrency exchanges, such as Wazirx and CoinDCX. These recurring events have heightened the demand for independent verification of custody balances. The industry is now facing increased pressure to improve transparency regarding how exchanges manage and protect user assets. ## Unresolved Financial and Operational Status The true financial impact remains unconfirmed as investigators work to reconcile Unocoin’s internal holdings with onchain evidence. Until the company provides a comprehensive audit, the discrepancy between their assurances and the empty dashboard persists. Stakeholders must await further updates regarding service restoration and the final outcome of the ongoing security forensic analysis. ## Sources covering this story - https://news.bitcoin.com/security/indias-unocoin-confirms-server-breach-arkham-shows-81k-empty-wallets/ — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._