Indian cryptocurrency exchange Unocoin has temporarily halted all deposits and withdrawals following the discovery of suspicious transactions linked to its BitGo wallet infrastructure. The exchange is currently investigating how these transactions occurred, particularly as they appeared to have been executed through a recovery mechanism outside of BitGo’s platform, despite the custodian account being frozen.
Investigation into BitGo Wallet Transactions
On November 6, Unocoin requested that BitGo freeze its enterprise account. This request was reportedly fulfilled as intended. However, ongoing investigations revealed that unauthorized transactions were signed and broadcast from the account, raising serious concerns about the potential misuse of BitGo’s recovery features, which are designed to allow access to assets if the service becomes unavailable.
On November 12, Unocoin detected outgoing transactions linked to an Ethereum address within its BitGo infrastructure, prompting it to escalate the issue to BitGo for further inquiry. While BitGo confirmed the freeze, the transaction activity suggests a breach or exploitation of the wallet’s recovery capabilities.
Security Breach Prompts Service Suspension
The situation escalated on November 6, leading Unocoin to request immediate freezes on accounts with both BitGo and another provider, Fireblocks, after identifying unauthorized activity. At that point, the company had not reported any loss of funds. However, following further unauthorized actions detected on November 9, Unocoin decided to suspend all services as a precaution to safeguard customer assets and data.
Subsequently, the company confirmed that its infrastructure had been compromised, although the precise cause of the breach remains unclear. Unocoin has opted to entirely rebuild its server infrastructure, which it estimates will take approximately four to five working days.
Bulk of Customer Funds Remain Secure in Cold Storage
Unocoin stated that over 90% of its customers’ cryptocurrency is held in cold storage, providing a layer of protection against online breaches. However, the exchange has not yet clarified the full scope of funds potentially affected by the suspicious transactions. The ongoing investigation is hindered by the current freeze on the BitGo accounts, which limits Unocoin’s ability to access transaction histories directly.
Additionally, Unocoin is seeking additional transaction-level information from BitGo to help clarify the situation further. Until it can verify specifics about the affected funds, the exchange has refrained from offering any assurances to customers regarding the status of their holdings.
Concerns Over Cryptocurrency Custody Security
This incident has raised significant questions about the security of cryptocurrency custody arrangements, particularly surrounding recovery mechanisms that can provide alternative access to funds. While multisignature wallets are generally used to enhance security by requiring multiple approvals for transactions, the presence of recovery protocols must also be adequately secured to prevent unauthorized access.
Unocoin’s investigation is now focused on how these transactions were authorized, the role of its wallet recovery infrastructure, and the potential impact on customer assets. The exchange faces a challenging road ahead in restoring customer confidence as it navigates through this situation.
What implications does this investigation have for the broader cryptocurrency custody industry? Can Unocoin regain its customers’ trust after resolving these issues?
