Indian cryptocurrency exchange Unocoin reports unauthorized access to servers and temporarily shuts down user logins
Indian cryptocurrency exchange Unocoin announced on November 9 that it had discovered unauthorized access to its servers that day and, as a precautionary measure, had temporarily shut down user login functionality so its technical team could investigate the incident and implement fixes. Unocoin explicitly stated that the incident did not result in any loss of crypto assets, that the platform would restore services after the investigation and necessary security measures were completed, and that it planned to publish the investigation results later.
On-chain analytics platform Arkham showed that the total current holdings value of the approximately 81,000 (about 80,986) addresses it tracks that belong to Unocoin is zero, with the page showing “No assets found.” Unocoin’s official website is currently returning a 504 error. Monitoring accounts such as OnchainLens pointed to the official announcement together with Arkham’s zero-holdings data and the website abnormality, and said they were checking on-chain fund movements. As of now, there is no public evidence confirming that assets have been transferred, and Unocoin reiterated in subsequent replies that funds are safe and the investigation is still ongoing.
Original source:
Title: Unocoin Update – 9 Nov 2026
Publisher: Unocoin (official blog)
Publication date: 2026-11-09
URL：blog.unocoin.com/unocoin-update-9-nov-2026
Source type: company announcement
Verification status: Full text read this time (2026-11-11), content is consistent with the update published the same day on the official X account
Supporting content: core facts such as discovering unauthorized server access on November 9, temporarily shutting down user login, stating that no crypto assets were lost, and investigation and remediation are under way
ABAB AI Insight
Unocoin was founded in 2013 and is one of India’s earlier crypto trading platforms for fiat on-ramps. In this incident, the platform proactively disclosed “unauthorized access to servers” and simultaneously took the isolation measure of shutting down logins, while also explicitly stating that there was “no loss of crypto assets.” Arkham’s showing of zero holdings for about 81,000 associated addresses is a current snapshot from an on-chain tracking tool and by itself cannot prove that assets were transferred; address labels cover hot wallets, cold wallets and user deposit addresses, and a zero balance could also reflect fund movement, label updates, monitoring scope or display issues. The website’s 504 error indicates that the service outage is still ongoing.
Compared with the typical pattern of assets rapidly moving on-chain and being tracked after a hot wallet theft, the currently public information remains a combination of “official statement of no loss + external monitoring showing zero holdings for associated addresses + service unavailable.” Accounts such as OnchainLens said they are tracking fund flows, but there has not yet been an independently confirmed report of a large abnormal transfer out. In response to user questions, the platform reiterated that funds are safe and the investigation is still ongoing; the key questions going forward are whether the official side will disclose changes in hot wallet balances, the specific scope affected, and details of asset flows.
For India’s local fiat-entry exchanges, unauthorized access at the server level, even if it does not directly cause on-chain asset outflows, can still trigger login disruption and trust pressure. If it is later confirmed that there was no asset loss, the incident would be closer to a preventive shutdown after an internal system intrusion; if it is confirmed that assets in the associated addresses were transferred, that would need to be reconciled with the official statement of “no loss.” Neither has yet been fully substantiated by public evidence, and market attention is focused on the investigation results and the timetable for service recovery.
ABAB News · Cognitive Law
When a platform’s proactive statement of “no asset loss” appears at the same time as external on-chain monitoring showing zero holdings for associated addresses, independent verification of fund flows is needed.
Unauthorized server access does not automatically rewrite on-chain balances, and a zero-holdings snapshot must be judged together with the scope of address labels and subsequent transfer records.
The continued login shutdown and website 504 indicate that the platform is still in the investigation and remediation stage, and service recovery depends on completion of internal verification.