đš UNOCOIN SECURITY INCIDENT: BITGO BACKUP WALLET SUSPECTED OF EXPLOITATION!
A major cryptocurrency security incident is raising serious questions about multisignature wallet protection.
India-based crypto exchange Unocoin is investigating suspicious transactions linked to its BitGo multisignature backup wallet.
đ What Happened?
âą November 6: Unocoin requested BitGo and Fireblocks to freeze its corporate accounts after detecting unauthorized activity.
âą November 9: Further suspicious activity forced Unocoin to suspend all services.
âą November 12: Unocoin identified outgoing transactions from an Ethereum address linked to its BitGo wallet infrastructure.
âą November 13: Unocoin revealed that the transactions were signed and broadcast directly on-chain, outside BitGo's platform.
đ The Critical Detail
BitGo told The Block that the transactions were signed using Unocoin's user and backup keys.
BitGo's account freeze worked as intended. However, it does not prevent transactions independently signed using keys held by the customer.
What About Customer Funds?
Unocoin says more than 90% of customer cryptocurrency is held in cold storage.
However, the company is still investigating:
âą Whether cryptocurrency assets were lost.
âą How the backup-key mechanism was accessed.
âą Whether customer information was exposed.
âą When services can safely resume.
â ïž No confirmed total loss figure has been published.
MY TAKE:
This incident highlights an important lesson in crypto custody:
Even when an exchange uses a professional custody provider, backup-key security and internal access controls remain critical.
A secure wallet system must protect every recovery path, not just the main platform.
đŹ Do you think multisig backup systems need stronger independent security audits?
#CryptoSecurity #Unocoin #BitGo #Ethereum #Multisig #BlockchainSecurity #Cybersecurity #CryptoNews
A major cryptocurrency security incident is raising serious questions about multisignature wallet protection.
India-based crypto exchange Unocoin is investigating suspicious transactions linked to its BitGo multisignature backup wallet.
đ What Happened?
âą November 6: Unocoin requested BitGo and Fireblocks to freeze its corporate accounts after detecting unauthorized activity.
âą November 9: Further suspicious activity forced Unocoin to suspend all services.
âą November 12: Unocoin identified outgoing transactions from an Ethereum address linked to its BitGo wallet infrastructure.
âą November 13: Unocoin revealed that the transactions were signed and broadcast directly on-chain, outside BitGo's platform.
đ The Critical Detail
BitGo told The Block that the transactions were signed using Unocoin's user and backup keys.
BitGo's account freeze worked as intended. However, it does not prevent transactions independently signed using keys held by the customer.
What About Customer Funds?
Unocoin says more than 90% of customer cryptocurrency is held in cold storage.
However, the company is still investigating:
âą Whether cryptocurrency assets were lost.
âą How the backup-key mechanism was accessed.
âą Whether customer information was exposed.
âą When services can safely resume.
â ïž No confirmed total loss figure has been published.
MY TAKE:
This incident highlights an important lesson in crypto custody:
Even when an exchange uses a professional custody provider, backup-key security and internal access controls remain critical.
A secure wallet system must protect every recovery path, not just the main platform.
đŹ Do you think multisig backup systems need stronger independent security audits?
#CryptoSecurity #Unocoin #BitGo #Ethereum #Multisig #BlockchainSecurity #Cybersecurity #CryptoNews
