Hacking Attempts on Upbit Reach 160,000 in First Half of the Year
There have been approximately 160,000 hacking attempts on Upbit, Korea’s largest cryptocurrency exchange, in the first half of this year alone, according to a report submitted by Upbit’s operator Dunamu to lawmaker Park Sung-joong of the National Assembly’s Science, ICT, Broadcasting, and Communications Committee.
“Cryptocurrency hacking incidents are increasing both domestically and internationally, and hacking attacks on exchanges such as Upbit, which have daily trading volumes exceeding KRW 2 trillion, are a serious issue,” Park said.
An uptick in hacking attempts
The data revealed that the number of cyber breach attempts in the first half of the year totaled 159,061–2.17 times higher than the number of attempts in the first half of last year, which stood at 73,249.
Hacking attempts on Upbit have been steadily increasing in recent years, from 8,356 in the second half of 2020 to 34,687 and 63,912 in the first and second half of 2021, respectively. In the first half of last year, there were 73,249, and 87,242 in the second half. Notably, the exchange suffered losses of approximately KRW 58 billion (approximately $43 million) from a hacking attack in 2019.
Ramping up security
Subsequently, Dunamu has taken action to enhance security by managing over 70% of its assets in cold wallets and operating hot wallets in a distributed structure instead of a singular one. Hot wallets refer to online crypto wallets, whereas cold wallets are crypto wallets that are offline and disconnected from the internet. Hot wallets offer the advantage of direct deposits and withdrawals, but they have weaker security levels — most known exchange hacks have thus occurred through this medium. On the other hand, cold wallets store private keys on offline sources like external hard drives and portable storage devices, making real-time trading difficult but providing better security and stability.
“We have taken various preventive measures since the hacking incident in 2019, such as operating hot wallets in a distributed manner. There have not been any successful cyber breaches to date,” Upbit said.
Regarding the role of the Ministry of Science and ICT in managing and overseeing crypto hacking incidents, Park pointed out that this still remains ambiguous. “The Ministry should conduct large-scale white-hat hacking tests and security assessments for crypto exchanges that are frequently faced with hacking attempts, as well as for hospitals and subway systems that manage large amounts of personal information,” he said.
