Indian exchange Unocoin says it suspects that BitGo's multisig backup was exploited, allowing onchain transfers to go through despite the account being frozen. The claim puts one of the most widely used institutional custody arrangements directly at the center of an active security incident.
Why it matters
BitGo provides custody and multisig infrastructure for a long list of exchanges, funds, and corporate treasuries. If the suspicion holds, it means an account freeze, which is supposed to be the last line of defense, did not stop movement of funds. That cuts at the core promise of institutional custody: that no single point of failure can move assets.
Market impact
The immediate read is reputational rather than a confirmed onchain loss figure. Expect exchanges and treasuries holding assets with BitGo to review their own freeze and withdrawal controls while the exploit claim is verified. Custody rivals will also press their own security messaging as institutional buyers grow more selective about multisig configurations.
Frequently asked questions
-
What does Unocoin allege happened with BitGo?
Unocoin suspects that BitGo's multisig backup was exploited, which allegedly allowed onchain transfers to occur even though Unocoin's account had been frozen.
-
Why is the multisig backup exploit claim significant?
BitGo provides custody and multisig infrastructure to many exchanges and institutional treasuries. If confirmed, the incident would show that an account freeze failed to prevent asset movement, undermining a core custody safeguard.
-
Have the losses from the suspected BitGo exploit been confirmed?
No confirmed loss figures have been published. The claim so far is Unocoin's allegation, and the scale of any onchain transfers remains unverified.
-
What is a multisig backup in crypto custody?
A multisig setup requires multiple independent keys to approve a transaction, so no single party can move assets alone. It is a standard control in institutional custody offerings like BitGo's.
-
How could this affect other exchanges using BitGo custody?
Exchanges and treasuries holding assets with BitGo are likely to review their own freeze and withdrawal controls while the allegation is investigated, and institutional buyers may scrutinize multisig configurations more closely.
TheBlock
CryptoSlate
WuBlockchain
WatcherGuru
CoinDesk