Key Notes
- Unocoin confirmed unauthorized server access on November 9 and disabled user logins.
- Onchain Lens reports zero holdings across roughly 81,000 Arkham-tracked addresses but theft remains unconfirmed.
- The exchange says no cryptocurrency was lost and its website now displays a maintenance notice.
Indian cryptocurrency exchange Unocoin is facing questions about its reserves after Onchain Lens reported zero holdings across roughly 81,000 addresses tracked by Arkham. The report follows a confirmed server breach, although Unocoin says no cryptocurrency funds have been lost.
The November 12 alert from Onchain Lens highlights a wallet-data snapshot rather than a verified loss calculation. It has raised concerns about where the exchange’s assets are held, but does not establish that every Unocoin wallet has been emptied by an attacker.
Unocoin Confirms Unauthorized Server Access
In its November 9 security update, Unocoin said it had identified unauthorized access to its servers that day. It temporarily disabled user logins while its technical team investigated and worked on remediation.
“No crypto funds have been lost in this incident,” the company said. It did not explain how the intruder gained access, identify the affected systems or publish a technical account of the breach.
The disclosure confirms a compromise of server access. It does not, on its own, demonstrate that private keys were exposed or that an intruder obtained authority to sign cryptocurrency transfers.
Unocoin said account access would remain restricted until the investigation and remediation process was completed. It also committed to publishing its findings after the investigation, without setting a date for restoring services.
Zero Tracked Balances Do Not Establish Theft
The approximately 81,000 addresses are blockchain addresses attributed to Unocoin in the reported Arkham view. That figure should not be read as the number of affected customers, nor does a zero portfolio value provide a complete accounting of the exchange’s assets and liabilities.
Determining whether funds were stolen requires tracing transfers, establishing control of destination wallets and reconciling those movements with the exchange’s records. A balance snapshot alone cannot distinguish unauthorized withdrawals from other movements or show whether additional holdings exist outside the tracked address set.
That distinction has mattered in other recent investigations. Some Keplr recovery transfers initially interpreted as theft were subsequently identified by the companies involved as protective operations. No equivalent explanation has been established for Unocoin’s reported balances.
Website Now Displays a Maintenance Notice
Early November 12 reports described a 504 gateway error on Unocoin’s website. When CoinScreamer checked later that morning, the official site instead displayed a maintenance page, saying essential server updates were underway to improve performance, stability and security.
The page provided no reopening time. Its appearance does not establish that account access or withdrawals have resumed, and it does not resolve the questions raised by the reported wallet data.
Unocoin’s statement that no funds were lost remains the company’s account of the incident. A confirmed theft amount, an explanation of the reported zero balances and a timetable for customers to regain access remain outstanding.
Disclaimer: CoinScreamer is an independent media brand owned and operated by NuvexMedia LLC, publishing news, research, and market insights on digital assets and related technologies. NuvexMedia LLC invests in and collaborates with companies across the digital asset, blockchain, and technology sectors. These relationships do not influence CoinScreamer’s editorial coverage, and the publication maintains full editorial independence to provide accurate, timely, and objective information. © 2025 NuvexMedia LLC. All rights reserved. This content is for informational purposes only and should not be considered legal, tax, investment, financial, or other professional advice.
