Indian cryptocurrency exchange Unocoin has temporarily disabled user logins after detecting unauthorized access to its servers on November 9, 2026. The company confirmed the security incident and assured customers that no cryptocurrency funds had been lost. The disruption, however, has persisted for several days, raising concerns about account accessibility and the exchange's security infrastructure.

The breach has drawn additional scrutiny after blockchain monitoring data showed zero holdings across roughly 81,000 wallet addresses attributed to Unocoin. While the findings have prompted questions about the exchange's cryptocurrency reserves, investigators have not established any connection between those balances and the security incident.

Unocoin Confirms Unauthorized Server Access

In its security announcement issued November 9, Unocoin said its technical team identified unauthorized server activity and immediately restricted account access. The exchange characterized the login suspension as a precautionary measure designed to protect users while investigators assess the situation. For customers, the practical effect is immediate: without account access, they cannot currently view balances or transact on the platform.

Unocoin stressed that customer cryptocurrency holdings remained secure despite the unauthorized access. The company has not, however, disclosed how the intrusion occurred, which systems were affected, or whether attackers gained access to sensitive customer information.

The exchange also confirmed that users will remain unable to access their accounts until the security investigation and corrective measures are complete, and it committed to publishing additional findings once its investigation concludes.

Blockchain Data Raises Questions About Reserves

On November 12, blockchain monitoring account Onchain Lens flagged unusual findings involving wallet addresses linked to Unocoin. Data from Arkham Intelligence showed approximately 81,000 associated addresses with a combined displayed portfolio value of zero.

These figures do not, however, prove that customer assets were stolen. Blockchain analytics platforms track only identified wallet addresses, meaning assets held in unidentified wallets may not appear in their calculations. That limitation is precisely why the questions remain open: without independent verification of the exchange's reserves, on-chain figures alone cannot settle whether customer holdings are intact.

Meanwhile, Unocoin's website was reportedly displaying a 504 Gateway Timeout error, signaling communication problems with its underlying server. The exchange has not publicly addressed the wallet balances or provided a confirmed timeline for restoring services.

Security Concerns Persist Across India's Crypto Industry

The incident underscores the ongoing cybersecurity challenges confronting cryptocurrency exchanges in India. Previous security breaches involving major domestic trading platforms have intensified scrutiny of digital asset custody, operational safeguards, and customer protection measures.

For Unocoin customers, the immediate concern remains access to their accounts and cryptocurrency holdings. The exchange maintains that no funds were lost, but independent verification of its reserves is not yet available.

Unocoin says its technical team continues to investigate the unauthorized access and implement security improvements. Further disclosures will be key to establishing the incident's full impact and determining when customers can safely resume normal trading activities.