Zipcoin shuts down after Railway breach exposes its code and private keys

24 Oct 2026

24 Oct 2026, 04:54 UTC+02:00

The Railway cloud breach has claimed a crypto project outright. Zipcoin, a privacy themed Ethereum token, announced its permanent shutdown on 22 October, citing two blows in a row.

Two incidents

The first was the 14 October exploit of UNCX Network’s Smart Token Vesting V2 contracts. According to UNCX’s incident report, attackers abused an accounting flaw across four networks to withdraw more tokens than they had deposited, affecting 10 tokens including Zipcoin’s ZC, with about $807,609 in value realized or routed. Zipcoin said it had quietly bought tokens to cover lost future commitments.

The second was decisive. Zipcoin said Railway alerted it that its entire codebase had been compromised, including secrets and private keys tied to the project, giving an attacker potential access to wallets and infrastructure. The team said it spent about 12 hours trying to migrate or rotate credentials without finding a viable path.

A six-hour window

Zipcoin said it still controlled wallets holding 2.2% of supply. It gave holders a six-hour window to sell before selling its remaining tokens and consolidating the funds, aiming to stop attackers from moving the assets first. TokenPost reported that ZC fell 84% around the announcement.

UNCX responded that its foundation had set up a voluntary ex-gratia program offering full recovery of realized stolen proceeds to affected Ethereum projects, subject to KYC and eligibility checks, and rejected what it called attempts to misrepresent its response.

What it means for traders

• Infrastructure risk is token risk: small projects often keep keys on cloud platforms. One breach can end a token.
• Vesting contracts are attack surface: third party locker and vesting services add risk.
• Prefer liquid, established assets on reputable exchanges. See our exchange comparison and testing methodology.

Sources

• The Crypto Times: Zipcoin announces closure amid UNCX vesting incident and infrastructure compromise
• TokenPost: Zipcoin Shuts Down After Code Repository Breach
• The Defiant: Zipcoin Announces Shutdown and Plans Token Sale

News is for information only and is not financial advice. More crypto news