Unocoin Says One of Its BitGo Addresses Sent Out Transactions It Can’t Trace

Introduction

Unocoin, one of India’s largest cryptocurrency exchanges, recently disclosed that it observed outgoing transactions from an Ethereum address managed by its custody provider BitGo. The exchange cannot fully trace these movements because its BitGo enterprise accounts are frozen and the provider’s wallet architecture relies on change addresses that obscure complete visibility. The incident follows a series of unauthorized activities that led Unocoin to suspend all services earlier this week.

What Unocoin Has Reported

• Untraceable transactions: The exchange identified outgoing transfers from a BitGo‑controlled Ethereum address used for funding ERC‑20 tokens. No details on the amount, number of transactions, or destination addresses were provided.
• Limited visibility: BitGo’s use of change addresses—new addresses generated to hold leftover balances after each transaction—means Unocoin cannot see the full flow of funds on the blockchain. The exchange explicitly stated it lacks "complete visibility into all potentially unintended transactions across our BitGo wallets."
• Frozen custody accounts: Both BitGo and another provider, Fireblocks, have frozen Unocoin’s enterprise accounts. Unocoin reports it cannot log in to the BitGo accounts, preventing any direct investigation from its side.
• Escalation to BitGo: Unocoin has asked BitGo for transaction‑level details and confirmed that BitGo has marked the matter as a priority and opened an investigation.

Timeline of the Incident

| Date | Event | |------|-------| | Nov 6 | Unocoin detects unauthorized activity and requests account freezes from Fireblocks (11:24 UTC) and BitGo (11:29 UTC). No losses reported at that time. | | Nov 9 | Additional unauthorized activity is observed. Unocoin suspends all services and announces its infrastructure was compromised. | | Nov 12 | Unocoin updates its incident post, revealing the untraceable outgoing transactions from the BitGo address and noting the ongoing investigation. |

The exchange is rebuilding its servers from scratch, a process it estimates will take four to five working days. No public statement from BitGo has been released beyond confirming the investigation’s priority status.

Context Within the Indian Crypto Landscape

Unocoin’s disclosure comes amid heightened scrutiny of Indian exchanges after a recent hack at CoinDCX, where the platform absorbed losses from a failed sweep of compromised addresses. Both incidents underscore the challenges Indian crypto firms face in securing custodial infrastructure and maintaining transparent communication with users during crises.

Practical Takeaways for Users and the Industry

• Custody transparency matters: Exchanges that rely on third‑party custodians should ensure they have real‑time visibility into transaction flows, even when change addresses are employed.
• Prompt communication is key: Unocoin’s incremental updates, while limited in detail, demonstrate the importance of keeping users informed during an ongoing investigation.
• Diversify risk: Users may consider spreading holdings across multiple platforms or using personal wallets to mitigate exposure to custodial failures.
• Regulatory oversight: Continued incidents may prompt regulators to demand stricter reporting standards for custodial relationships and incident disclosures.

Closing Thoughts

Unocoin’s current inability to trace the outgoing Ethereum transactions highlights a broader issue in the crypto custody ecosystem: the balance between security mechanisms like change addresses and the need for transparent auditability. As BitGo’s investigation proceeds, the exchange and its users await clearer answers on the scope of the loss, if any, and the steps required to restore full operational confidence. Until then, the incident serves as a reminder that robust custodial oversight and clear communication remain essential pillars for the health of the crypto market.