
Indian crypto exchange investigates potential misuse of BitGo wallet recovery feature following compromised servers.
Indian crypto exchange Unocoin has suspended deposits and withdrawals while investigating suspicious outgoing transfers from wallets linked to custodian BitGo, suspecting the misuse of a recovery feature.
AI-generated summary
Unocoin detected unauthorized activity and compromised servers, prompting a suspension of services.
Indian cryptocurrency exchange Unocoin has kept deposits and withdrawals suspended as it investigates whether suspicious transfers from wallets linked to custodian BitGo were made using a recovery feature.
On Friday, the exchange said that BitGo had frozen the exchange’s enterprise account on Nov. 6 at Unocoin’s request and that the freeze worked as intended. The transactions under investigation were signed and broadcast outside BitGo’s platform, Unocoin said.
The exchange said BitGo’s multisignature wallets include a recovery feature that lets wallet holders access funds if BitGo becomes unavailable. Unocoin suspects the feature was misused and has yet to establish how the transfers occured or whether it lost any digital assets.
Unocoin and BiGo did not respond to Cointelegraph’s request for more information before publication.
Unocoin first the unauthorized activity on Nov. 6 and suspended all services on Monday after detecting further activity. On Thursday, it disclosed outgoing transactions from an Ethereum address in its BitGo wallet infrastructure and said its servers had been compromised.
The exchange has not announced a date for restoring services.
A Nov. 5 warning from India’s cybersecurity agency described an AI-assisted campaign targeting crypto exchanges and other financial firms. No connection to Unocoin’s incident has been established.

A global Microsoft 365 outage disrupted Outlook, Teams, and enterprise services worldwide due to an overloaded secure connection process. Microsoft applied patches and expanded capacity, while government agencies and AI services reported issues.

A depositor in Aave lost about $305,000 in a deposit token during the Nov. 10 hijack of Across Protocol's website, according to a Bitquery investigation updated Nov. 12. Bitquery's revised trace estimates $401,900 taken from nine wallets across five blockchains, with the Aave depositor accounting for about 76% of traced losses. Across Protocol said its domain was taken over through social engineering involving registrar Namecheap.

Senator Josh Hawley called for a nationwide moratorium on new data centers until Congress passes consumer protections against rate increases, while the Senate advances the Bipartisan American Affordability and Jobs Act to speed energy project reviews and require data center operators to pay their own grid costs.

Anthropic's Fable 5.2 ranks first on Scale's Remote Labor Index with 41.3% of deliverables meeting a professional reference standard, ahead of Opus 5.5 at 21.25%. The RLI evaluates 240 freelance projects across 23 categories using human reviewers, but exclusions for client interaction, teamwork, and physical labor limit broader applicability.

Trezor CTO Tomáš Sušánka discusses post-quantum Bitcoin custody risks tied to SHRINCS, a stateful signature scheme requiring rigid state tracking to prevent fund theft, and Trezor's plans to support secure UX and quantum-ready hardware.

DTCC plans to connect its tokenization service to Solana in the second half of 2027, allowing certain DTC-held securities to become digital tokens on the network. Analysts say the move could bring traditional finance activity to Solana beyond memecoins, but SEC rules requiring registered wallets may limit its near-term impact.