India-based cryptocurrency exchange Unocoin has reported unauthorized access to its servers, prompting the platform to temporarily disable user logins as a security precaution. The incident was disclosed on November 9, raising concerns about the exchange’s operational security and the status of customer assets.
OnchainLens reported the security incident, while blockchain intelligence platform Arkham Intelligence showed zero holdings across approximately 81,000 addresses associated with Unocoin. At the same time, the exchange’s website reportedly returned HTTP 504 gateway timeout errors, indicating that users were experiencing difficulties accessing the platform.
The incident has raised questions about the security of customer funds and the exchange’s ability to maintain normal operations while investigators examine the unauthorized server access and potential on-chain movements.
Unocoin Suspends Logins Following Unauthorized Access
Founded in 2013, Unocoin is regarded as India’s oldest cryptocurrency exchange and has played a role in the development of the country’s digital asset trading industry.
The company disclosed unauthorized access to its server infrastructure on November 9. Following the discovery, the exchange temporarily disabled customer logins, restricting access to user accounts while the security incident was being examined.
Although disabling logins can help limit unauthorized account activity during an investigation, the move also prevents legitimate customers from accessing their accounts and checking their holdings through the platform.
The available information does not establish whether the unauthorized access resulted in the compromise of customer accounts, administrative systems, or wallet infrastructure. The precise method used to gain server access also remains unclear.
The incident highlights the security challenges facing cryptocurrency exchanges, which must protect both their internet-facing infrastructure and the systems responsible for managing customer assets.
Arkham Intelligence Shows Zero Tracked Holdings
Blockchain intelligence data has added another dimension to the incident. Arkham Intelligence reportedly displayed zero-dollar balances across approximately 81,000 addresses associated with Unocoin.
The reported figures have raised concerns because cryptocurrency exchanges typically maintain digital asset reserves across multiple wallet addresses to facilitate customer withdrawals, deposits, and internal treasury operations.
However, a zero balance across tracked addresses does not independently establish that customer funds have been stolen or transferred by unauthorized parties. Exchange wallet activity can involve address changes, internal transfers, custody arrangements, and other movements that may not be fully reflected in a limited set of tracked addresses.
Investigators are reportedly examining on-chain transactions to determine whether assets were moved and whether any transfers were connected to the unauthorized server access.
Establishing the actual status of customer funds will require additional verification, including identifying the relevant wallet addresses, tracing transaction destinations, and determining whether any assets remain under the exchange’s control.
INDIA’S OLDEST CEX HACKED? 81K WALLETS SHOW $0
Unocoin reported unauthorized server access on November 9 and temporarily disabled user logins.
Meanwhile, Arkham shows $0 in holdings across its 81,000 tracked addresses, while its website is returning a 504 error.
We are investigating onchain movements to determine the exact modus operandi.
— Onchain Lens (@OnchainLens) November 12, 2026
Website Errors Add to Customer Concerns
Unocoin‘s website was also reportedly returning HTTP 504 gateway timeout errors during the incident. This type of error generally occurs when a gateway or proxy server does not receive a timely response from an upstream server.
The website disruption, combined with suspended logins, has limited customers’ ability to access the exchange and obtain information about their accounts.
For cryptocurrency platforms, prolonged service interruptions can create uncertainty because customers depend on exchange infrastructure to monitor balances, execute trades, and initiate withdrawals.
Investigation Needed to Establish the Extent of the Incident
The available reports have not confirmed the exact entry point used by the attackers, the extent of the server compromise, or whether customer assets have been affected. No verified loss figure has been established from the information currently available.
The key issue remains whether the unauthorized access was limited to server infrastructure or extended to systems controlling cryptocurrency wallets and customer funds.
The incident also underscores the importance of transparent security disclosures, independent wallet verification, and reliable communication during exchange outages. Until investigators establish the breach mechanism and verify the status of the exchange’s reserves, the full financial and operational impact on Unocoin and its customers remains uncertain.