Unocoin Investigates BitGo Wallet Backup Mechanism After Abnormal Transfers

Indian cryptocurrency exchange Unocoin is investigating whether a backup mechanism inside its BitGo multisignature wallet was exploited, potentially exposing user information or causing cryptocurrency losses. The exchange disclosed the probe as its platform services remain paused pending an assessment of the possible impact.

The mechanism under scrutiny exists to provide access to funds when BitGo, the qualified custodian that provides Unocoin's wallet infrastructure, is unavailable. Unocin stated that the mechanism appears to have been used improperly. The exchange has not confirmed whether assets were actually lost or whether information was exposed, leaving the financial scope of the incident undetermined as of the disclosure.

What did BitGo confirm about the account freeze?

Unocoin said BitGo confirmed that it froze the exchange's corporate account on Nov. 6. The freeze was executed at Unocoin's request, and BitGo has stated that it remains in effect. The account freeze functions as a containment measure while the investigation proceeds, restricting movement through the custodial relationship even as on-chain analysis continues.

The abnormal transfers that triggered the investigation carry a specific technical signature, according to the exchange's account. Unocoin said the transfers were signed outside BitGo and then broadcast on-chain. The transactions did not pass through BitGo's platform, a detail that shapes where responsibility for the signing event sits within the multisignature arrangement.

Why does the signing path matter?

In a multisignature custody setup, control over funds depends on which key holders sign a transaction and through which interface those signatures occur. Transfers signed outside BitGo and broadcast directly to the blockchain indicate the activity originated from a key path that bypassed the custodian's platform entirely. That is precisely the scenario a backup mechanism — designed to restore fund access when BitGo is unreachable — could enable if it were activated without authorization.

The operational consequence for Unocoin is twofold. First, the exchange cannot yet rule out direct cryptocurrency losses from its treasury or customer holdings. Second, the possibility of information exposure adds a data-protection dimension to the incident, which for an Indian exchange invokes obligations under the country's data-protection framework alongside any financial reconciliation with users.

What happens to Unocoin's services?

Unocoin's platform services remain paused. The exchange has not published a timeline for restoration, stating only that it is continuing its investigation and assessing possible impact while the suspension stays in force. The Nov. 6 account freeze at BitGo remains effective in parallel, meaning the custodial and platform layers of the business are both locked while the facts are established.

For Unocoin's user base, the pause means deposits, withdrawals and trading functions are unavailable for the duration of the probe. The exchange has not stated what percentage of funds the BitGo multisignature arrangement covers or how the backup mechanism's key material was accessed.

The next concrete markers to watch are Unocoin's confirmation or exclusion of asset losses, any quantification of the abnormal transfers, and a decision on lifting the service pause. Until the exchange publishes findings on whether the backup mechanism was exploited and by whom, the Nov. 6 freeze and the platform suspension remain the only verified containment facts on record.