Unocoin Suspends Logins After Server Breach, Withdrawals Stall

Indian cryptocurrency exchange Unocoin has kept customer logins suspended as of November 12, three days after confirming unauthorized activity on its servers. The company has stated repeatedly that customer crypto funds remain safe, but it has not set a date for restoring access, and customers report withdrawals delayed for as long as two weeks.

The Bangalore-based exchange first halted cryptocurrency withdrawals on November 1, citing a server upgrade. On November 6, Unocoin suspended withdrawals a second time after detecting unauthorized activity on its servers, according to its own statements on social media. Logins were suspended shortly after and remained blocked through November 12.

What has Unocoin said?

Unocoin has continued responding to worried customers on social media, repeating that their funds remain safe. On November 11, the exchange said its team was investigating the incident and working to improve its security systems. It repeated the same message on November 12, explaining that logins would remain suspended until the necessary security checks were complete.

The exchange has apologized for the inconvenience but has not given a specific date for restoring access. It says it will provide further updates as more information becomes available. Unocoin continues to insist that no customer crypto funds have been lost and that the suspension is a safety measure while its investigation continues.

What are customers reporting?

Customer complaints predate the public disclosure of the breach. Some users had reported withdrawal problems as early as October 30, before the November 1 suspension was announced. One user claimed the exchange had given different explanations about maintenance before revealing the unauthorized access.

On November 9, a user named MK publicly questioned the exchange about the earlier suspension of crypto withdrawals. That exchange of messages preceded the login suspension that followed the breach disclosure.

Individual customers have described concrete service failures:

• Harjeet Singh said he had been unable to access his account for two days. He hoped the exchange had the situation under control and that his funds were safe.
• Brijendra Singh Mathuria asked when logins would be restored and whether his assets were secure. Unocoin replied that customer funds were completely safe and that services would resume after the investigation and security checks were finished.
• Another customer complained that an Indian rupee withdrawal requested roughly 13 days earlier had still not arrived.

The rupee withdrawal complaint stands out because it predates even the October 30 crypto withdrawal reports, suggesting the service disruption has spanned both fiat and crypto rails for at least two weeks.

Why does the timeline matter?

The sequence of Unocoin's communications has drawn scrutiny. Customers first heard about maintenance and server upgrades, then learned of unauthorized server activity days later. One user said the exchange gave different explanations about maintenance before disclosing the unauthorized access.

The operational picture, reconstructed from the exchange's own statements:

• October 30: Customers begin reporting withdrawal problems.
• November 1: Unocoin stops crypto withdrawals, citing a server upgrade.
• November 6: Withdrawals suspended again after unauthorized activity detected on servers.
• November 11: Unocoin says its team is investigating and improving security systems.
• November 12: Logins remain suspended pending security checks; no restoration date given.

This timeline raises questions about how long unauthorized activity persisted before detection and whether the initial maintenance explanation covered the same underlying problem.

What does this mean for Indian crypto exchanges?

The incident has revived security concerns across India's crypto industry. A social media user, Sam Giri, compared the Unocoin breach with the 2025 CoinDCX security breach. He stressed that Indian crypto exchanges need independent security checks and stronger measures to protect customer funds, and he called on regulators to take action.

The comparison carries weight because India's exchange sector has now produced two significant security incidents in a single year. Giri's demand for independent audits points to a structural gap: no mandatory third-party security review regime currently governs Indian crypto platforms comparable to the oversight frameworks operating in other jurisdictions.

What happens next?

Unocoin has committed to sharing more information as its investigation progresses, but it has published no technical details about the nature of the unauthorized activity, no timeline for restoring logins, and no findings on whether any data beyond server access was compromised. Customers awaiting rupee withdrawals have no stated resolution date.

The exchange's credibility now rests on the gap between its repeated assurances and its delivery of restored service. Until Unocoin publishes a restoration timeline or an independent assessment of the breach, the November 6 detection date marks the start of an open-ended outage for an exchange that has operated in India since 2013.