TREE NEWS update: BitGo said its systems were not compromised in the Unocoin incident, stating that recent outbound transactions were signed by Unocoin’s own user key and backup key and broadcast directly on-chain outside the BitGo platform. BitGo’s third key was never used and other clients were unaffected. Unocoin, which uses a 2-of-3 self-custody wallet, detected an outbound transaction from an Ethereum address in its BitGo wallet infrastructure on Nov. 12 and has suspended all services.
BitGo says Unocoin outflow was signed by Unocoin’s own keys, third key unused
The significance here is jurisdictional: the loss sits with Unocoin's own key custody rather than the shared infrastructure provider, which narrows the blast radius to a single client and removes a platform-wide failure narrative. For other BitGo clients on similar 2-of-3 setups, the reassurance is structural — the third key was never invoked — but it also highlights that self-custody arrangements concentrate operational risk at the key-holder. What remains open is how the two Unocoin-held keys were compromised, and whether the suspension reveals anything about internal controls that other self-custody operators share.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.