Unocoin Probes Suspected BitGo Wallet Recovery Exploit
By Abdelaziz Fathi
AI summary of the source article
Unocoin is investigating whether a backup recovery mechanism in BitGo multisignature wallets was exploited to execute unauthorized cryptocurrency transfers. The exchange remains suspended while it rebuilds its compromised server infrastructure following a breach detected on November 6.
Why it matters
The incident exposes an important distinction between freezing access to a custody platform and preventing transactions through independent wallet recovery arrangements. If external signing credentials remain usable, an account-level restriction may not be sufficient to stop unauthorized blockchain transfers.
Key facts
- Unocoin requested freezes on its Fireblocks and BitGo enterprise accounts on November 6, but detected unauthorized outgoing Ethereum transactions on November 12.
- The transactions were signed and broadcast directly on-chain, bypassing BitGo's platform via a suspected exploit of its independent wallet recovery mechanism.
- Unocoin has not confirmed any cryptocurrency losses, maintains over 90% of customer holdings in cold storage, and is rebuilding its server infrastructure from scratch.
Source excerpt · FinanceFeeds
Indian cryptocurrency exchange Unocoin is investigating whether a recovery mechanism in BitGo multisignature wallets was exploited to execute unauthorized cryptocurrency transfers, as its platform remains suspended following a security breach detected on November 6. In a November 13 update, Unocoin said BitGo had confirmed that its enterprise account was frozen as requested and that the freeze app…