Top

Upbit suffers $30M breach, overshadowing Dunamu’s major merger announcement

Markets·November 28, 2025, 2:27 AM

South Korea’s largest crypto exchange, Upbit, suffered a security breach on Nov. 27 that resulted in the theft of 44.5 billion won ($30.4 million) in digital assets, all taken from the exchange’s hot wallets. The stolen tokens were all Solana-based, and Upbit CEO Oh Kyoung-suk said in a statement that no users will incur losses, as the company will cover the full amount with its own reserves.

https://asset.coinness.com/en/news/070b84bbeb9f3292d29e545818df0769.webp
Photo by FlyD on Unsplash

Hot-wallet breach hits 24 tokens

The exchange said in a statement that the compromised tokens were transferred to an unknown external wallet at around 7:42 p.m. UTC on Nov. 26. In total, 24 cryptocurrencies were affected, all within the Solana ecosystem. The stolen assets ranged from infrastructure tokens such as Solana (SOL) to staking-related assets like Jito (JTO), along with the stablecoin USD Coin (USDC) and memecoins including Bonk (BONK), Moodeng (MOODENG), and Official Trump (TRUMP).

 

According to Oh, the breach was followed by an emergency security review of the affected networks and wallets. He added that all remaining assets were moved to cold storage to prevent further unauthorized transfers. Oh also said the exchange is working to trace the stolen assets and block on-chain movements wherever possible, noting that Solayer (LAYER) tokens worth 2.3 billion won ($1.6 million) have already been frozen. Upbit is also reaching out to relevant projects and institutions for assistance.

 

This marks Upbit’s second theft case. The first took place on Nov. 27, 2019, exactly six years ago to the day, according to News1.

 

Authorities focus on Lazarus’ involvement

Financial authorities are investigating the incident, and North Korea’s Lazarus Group is being treated as the leading suspect, the Maeil Business Newspaper reported.

 

Lazarus is also believed to have been behind the 58 billion won ($40 million) worth of Ethereum (ETH) stolen from Upbit in 2019. A government official told the paper that the latest breach did not appear to stem from a server intrusion but may have involved a stolen administrator account, allowing the attackers to impersonate internal staff and move assets—similar to the method used in the 2019 case.

 

Security analysts echoed that assessment. One investigator said the stolen funds moved through exchange wallets before being mixed, a pattern often linked to Lazarus. He added that mixers, which are prohibited in Financial Action Task Force (FATF)-member jurisdictions, make tracing difficult and that attackers typically route assets through countries outside that framework, further pointing to North Korea.

 

Following the incident, Upbit suspended deposits and withdrawals for all assets and said services will resume once security is fully verified. The halt has also affected trading dynamics on the exchange, with CryptoQuant CEO Ki Young Ju noting that retail investors are fueling altcoin spikes as arbitrage bots remain offline.

 

Dunamu, Naver set $6.8B growth plan

The security crisis struck at a particularly sensitive moment for Upbit’s operator, Dunamu, overshadowing what was intended to be a celebratory corporate milestone. On that same day, Dunamu, Naver, and Naver Financial held a joint press conference to outline their global expansion strategy. Dunamu brings its blockchain and crypto infrastructure, Naver contributes its position as Korea’s dominant search engine, and Naver Financial adds its payment platform serving 34 million users.

 

The event came after reports that Naver Financial and Dunamu had approved a merger plan through a comprehensive share swap, with the ratio set at 1 to 2.54. The three companies said they will combine their respective strengths to invest 10 trillion won ($6.8 billion) over the next five years in building an ecosystem centered on Web3 and artificial intelligence (AI).


During the press conference, Naver CEO Choi Soo-yeon said no decisions have been made on a Nasdaq listing for the newly combined Naver Financial–Dunamu entity or on whether it might eventually merge with Naver, according to TechM. She said dual listings remain a matter requiring national consensus. Choi also noted that while Naver Financial is a Naver subsidiary, Dunamu is the larger partner, and a later merger between the combined entity and Naver is unlikely.

More to Read
View All
Policy & Regulation·

Jan 13, 2024

Hong Kong lawmaker suggests action on ETFs as asset managers explore potential

In the immediate aftermath of the approval of spot bitcoin exchange-traded funds (ETFs) in the United States earlier this week, a Hong Kong legislator has spoken out to encourage a proactive response within the Chinese autonomous territory, while asset managers appear to be responding accordingly.Photo by Simon Zhu on UnsplashCompetitive responseLawmaker Johnny Ng has called on the local government to swiftly embrace the recent ETF approval in the United States. In a post on X, Ng emphasized the need for Hong Kong to proactively lead the way in the cryptocurrency space, fostering innovation to secure a global position amidst intense competition. Ng highlighted the Securities and Futures Commission's (SFC) previous expression of readiness to accept applications for spot bitcoin ETFs. He urged Hong Kong to capitalize on the rapidly evolving virtual asset sector, implementing policies and products that position the city as a global hub for virtual assets. "This presents an opportunity to solidify Hong Kong’s position as a global hub for virtual assets," Ng stated, emphasizing the importance of seizing this moment in the market's development. In December, Hong Kong's regulatory bodies, the SFC and the Hong Kong Monetary Authority (HKMA), reviewed their existing policies, releasing circulars that outlined the requirements for spot crypto ETFs. Fund managers explore ETFsHashKey, a licensed crypto exchange in Hong Kong, confirmed its potential participation in spot crypto ETFs through engaging in crypto transactions associated with ETFs and providing crypto custody services. The company, which obtained a license from the SFC to offer retail crypto trading services in August, positions itself to play a pivotal role in the emerging market. Livio Weng, COO of the Hong Kong-based crypto exchange, revealed that approximately ten fund managers, backed by Chinese capital and others from Asia and Europe, are exploring the launch of spot crypto ETFs in Hong Kong. Weng, in an interview with Chinese financial news media Caixin, disclosed that seven or eight of these fund managers have already been in contact with the SFC, forming teams to design investment products. Highlighting the importance of education in the crypto space, Ng called on the Hong Kong government to prioritize public education. He stressed the need to increase awareness of virtual assets among the public while simultaneously reducing opportunities for illicit activities involving digital assets. Substantial impactIn an interview earlier this week, Yat Siu, the co-founder of Hong Kong-based crypto venture capital and game software firm Animoca Brands, expressed the view that the spot bitcoin ETF approval in the U.S. would have a more substantial impact on the overall development of crypto in Asia. As Hong Kong prepares to pave the way for spot crypto ETFs, the SFC and the HKMA have already reviewed existing policies, outlining the requirements for such investment products. The December circular from the SFC emphasized that transactions involving spot crypto ETFs should occur through licensed crypto platforms or authorized financial institutions, ensuring regulatory compliance in the growing crypto market. 

news
Policy & Regulation·

Jul 04, 2023

Singapore Looks to Prohibit Crypto Lending and Staking

Singapore Looks to Prohibit Crypto Lending and StakingIn a move to bolster investor protection and maintain financial stability, the Monetary Authority of Singapore (MAS) is introducing new guidelines for cryptocurrency platforms operating in the country.Details of the measures were published by MAS on Monday. According to its statement, the measures “will mitigate the risk of loss or misuse of customers’ assets, and facilitate the recovery of customers’ assets in the event of a DPT [Digital Payment Token] service provider’s insolvency.”The proposed guidelines outline several key measures. One such measure is the daily reconciliation of customer assets, which will help prevent discrepancies and safeguard against potential losses.Photo by Hu Chen on UnsplashHolding assets in trustAdditionally, the custody function, responsible for holding and safeguarding client assets, will be operationally separated from other business divisions to minimize the risk of mismanagement or unauthorized use. By the end of this year, it’s understood that crypto platforms will be required to store client assets in trust accounts, ensuring enhanced security and accountability.DisclosuresFurthermore, licensed cryptocurrency service providers will be mandated to provide explicit disclosures to customers, clearly outlining the risks associated with holding and trading digital payment tokens (DPTs). Recognizing the speculative nature of digital token trading, the MAS acknowledges that regulations alone cannot fully protect consumers from potential losses.To further protect retail investors, the MAS intends to prohibit cryptocurrency service providers from facilitating lending or staking activities. Lending and staking, where digital tokens are loaned or pledged to earn profits, are considered unsuitable for the general public due to their complex and high-risk nature.These measures come as part of Singapore’s efforts to strengthen its regulatory environment for digital assets. The consultation process began last year, following the collapse of FTX, a cryptocurrency exchange.Singaporeans suffered disproportionately with the collapse of FTX as previously, MAS had banned global crypto exchange Binance from operating within the city-state. That led to Singapore having more FTX customers than many other world regions. To compound matters, state-owned global investment firm Temasek, was an investor in the fraudulent crypto exchange.MAS had called for feedback and proposals, with a focus on enhancing investor safeguards and promoting responsible trading practices. While the regulations aim to provide a safer environment for investors, the MAS also emphasizes the importance of individuals exercising caution when engaging in digital token trading.Contrasting approachesWhile Singapore is taking steps to tighten regulations, other cities like Hong Kong are adopting a more inclusive approach to the crypto industry. Hong Kong Legislative Council member Johnny Ng has voiced support for the local crypto business and has encouraged prominent exchanges like Coinbase to establish operations in the territory, aiming to foster greater engagement and growth within the sector.As the crypto industry continues to evolve, regulatory frameworks play a crucial role in ensuring investor protection and maintaining market integrity. Singapore’s proactive approach to strengthening its regulatory environment reflects its commitment to striking a balance between fostering innovation and safeguarding the interests of investors.

news
Policy & Regulation·

Jun 16, 2023

Hong Kong Pressing Banks to Facilitate Crypto Clients

Hong Kong Pressing Banks to Facilitate Crypto ClientsHong Kong’s banking regulator is urging banks, including HSBC and Standard Chartered, to onboard crypto exchanges as clients, despite increasing regulatory scrutiny of the industry in the United States.That’s according to a report published by the Financial Times (FT) on Wednesday. The FT cited three people who it claims are familiar with the matter, together with a letter seen by the publication as the basis for the assertion.Photo by Ansel Lee on PexelsChallenging crypto banking reticenceAt a recent meeting, the Hong Kong Monetary Authority (HKMA) questioned these UK-based lenders, together with the Bank of China, about their reluctance to accept crypto exchanges as customers, according to sources familiar with the matter. The HKMA emphasized that due diligence on potential clients should not create unnecessary burdens, particularly for those seeking opportunities in Hong Kong. While banks do not have a ban on crypto clients, concerns over potential money laundering and illegal activities have made them cautious.The pressure faced by banks highlights the challenges Hong Kong is facing in establishing itself as a global hub for the crypto industry, especially in light of previous high-profile collapses, such as the implosion of FTX. However, the HKMA is encouraging banks to overcome their reservations, as the regulator believes there is resistance from senior executives who adhere to traditional banking mindsets.The enthusiasm of some Hong Kong officials for the sector is evident as pro-Beijing lawmaker Johnny Ng invited Coinbase and other crypto exchanges to set up operations in the city following the recent SEC lawsuit against Binance and Coinbase.Caught between opposing forcesBanks in Hong Kong find themselves walking a fine line between supporting the crypto industry as encouraged by the government and being cautious due to the US regulatory environment. They want to ensure the industry’s development aligns with government policies, but they are also concerned about potential anti-money laundering and know-your-customer issues.The HKMA and the Securities and Futures Commission (SFC) have been vocal about their expectations, setting them apart from regulators in other jurisdictions that may be more skeptical of cryptocurrencies. Last month it emerged that crypto startups are having difficulties in establishing banking facilities in the autonomous Chinese territory. At the time, the HKMA did convene a meeting to bring parties together in order to forge a path forward.While Hong Kong has a history as a crypto center, its position weakened after Beijing’s crackdown on the industry in 2017. However, the Hong Kong government aims to reestablish the city as a hub for digital assets, having expressed its desire to provide a supportive environment for crypto-related businesses. The introduction of a new licensing regime for crypto platforms in Hong Kong is part of the government’s efforts to attract more crypto groups to the city.HSBC, Standard Chartered, and the Bank of China hold influential positions in Hong Kong as issuers of the city’s currency and have key roles in the Hong Kong Association of Banks lobby group. Standard Chartered claims that it maintains regular dialogue with regulators on various subjects, while HSBC has claimed that it is actively engaging in policies and developments within the nascent industry.

news
Loading