---
title: Indian exchange Unocoin says its infrastructure was compromised, is rebuilding from scratch, and has found outgoing transactions from a BitGo ETH address | ctxsec
url: https://ctxsec.com/items/unocoin-confirms-infrastructure-compromise-rebuild-bitgo-eth-outgoing-transactions-nov-12
description: "Unocoin says it detected unauthorized activity on Nov 6, froze its Fireblocks and BitGo enterprise accounts within minutes, then saw more unauthorized activity on Nov 9 and suspended all services. Its investigation has since established that its infrastructure was compromised; the systems accessed and data potentially exposed are still being determined, and the root cause isn't known. On Nov 12 it found outgoing transactions from one ETH address in its BitGo wallet infrastructure used to fund ERC-20 tokens; BitGo is investigating how they were executed, and Unocoin can't yet see the full extent because the accounts are frozen. It says more than 90% of customer crypto is in cold storage and estimates the rebuild at 4-5 working days."
status: "official (Unocoin security incident update, Nov 12, 2026); amount of the BitGo outgoing transactions not yet known"
published: 2026-11-12
---

> Unocoin says it detected unauthorized activity on Nov 6, froze its Fireblocks and BitGo enterprise accounts within minutes, then saw more unauthorized activity on Nov 9 and suspended all services. Its investigation has since established that its infrastructure was compromised; the systems accessed and data potentially exposed are still being determined, and the root cause isn't known. On Nov 12 it found outgoing transactions from one ETH address in its BitGo wallet infrastructure used to fund ERC-20 tokens; BitGo is investigating how they were executed, and Unocoin can't yet see the full extent because the accounts are frozen. It says more than 90% of customer crypto is in cold storage and estimates the rebuild at 4-5 working days.

[← Cybersecurity News](/news) · [markdown](/items/unocoin-confirms-infrastructure-compromise-rebuild-bitgo-eth-outgoing-transactions-nov-12.md)

official (Unocoin security incident update, Nov 12, 2026); amount of the BitGo outgoing transactions not yet known

2026-11-12 7:40 AM ET

### Indian exchange Unocoin says its infrastructure was compromised, is rebuilding from scratch, and has found outgoing transactions from a BitGo ETH address

- **Change from earlier messaging:** Unocoin's Nov 9 note said no funds were lost; the Nov 12 update adds the unexplained BitGo transactions and confirms an infrastructure compromise.
- **Customers:** treat any credentials, KYC data and 2FA reused elsewhere as potentially exposed until Unocoin reports scope; beware phishing that uses the incident.
- Unocoin, founded 2013, is one of India's oldest exchanges.

Sources: [Unocoin: Security Incident Update, 12 Nov 2026](https://blog.unocoin.com/unocoin-update-9-nov-2026/)