Top

Upbit suffers $30M breach, overshadowing Dunamu’s major merger announcement

Markets·November 28, 2025, 2:27 AM

South Korea’s largest crypto exchange, Upbit, suffered a security breach on Nov. 27 that resulted in the theft of 44.5 billion won ($30.4 million) in digital assets, all taken from the exchange’s hot wallets. The stolen tokens were all Solana-based, and Upbit CEO Oh Kyoung-suk said in a statement that no users will incur losses, as the company will cover the full amount with its own reserves.

https://asset.coinness.com/en/news/070b84bbeb9f3292d29e545818df0769.webp
Photo by FlyD on Unsplash

Hot-wallet breach hits 24 tokens

The exchange said in a statement that the compromised tokens were transferred to an unknown external wallet at around 7:42 p.m. UTC on Nov. 26. In total, 24 cryptocurrencies were affected, all within the Solana ecosystem. The stolen assets ranged from infrastructure tokens such as Solana (SOL) to staking-related assets like Jito (JTO), along with the stablecoin USD Coin (USDC) and memecoins including Bonk (BONK), Moodeng (MOODENG), and Official Trump (TRUMP).

 

According to Oh, the breach was followed by an emergency security review of the affected networks and wallets. He added that all remaining assets were moved to cold storage to prevent further unauthorized transfers. Oh also said the exchange is working to trace the stolen assets and block on-chain movements wherever possible, noting that Solayer (LAYER) tokens worth 2.3 billion won ($1.6 million) have already been frozen. Upbit is also reaching out to relevant projects and institutions for assistance.

 

This marks Upbit’s second theft case. The first took place on Nov. 27, 2019, exactly six years ago to the day, according to News1.

 

Authorities focus on Lazarus’ involvement

Financial authorities are investigating the incident, and North Korea’s Lazarus Group is being treated as the leading suspect, the Maeil Business Newspaper reported.

 

Lazarus is also believed to have been behind the 58 billion won ($40 million) worth of Ethereum (ETH) stolen from Upbit in 2019. A government official told the paper that the latest breach did not appear to stem from a server intrusion but may have involved a stolen administrator account, allowing the attackers to impersonate internal staff and move assets—similar to the method used in the 2019 case.

 

Security analysts echoed that assessment. One investigator said the stolen funds moved through exchange wallets before being mixed, a pattern often linked to Lazarus. He added that mixers, which are prohibited in Financial Action Task Force (FATF)-member jurisdictions, make tracing difficult and that attackers typically route assets through countries outside that framework, further pointing to North Korea.

 

Following the incident, Upbit suspended deposits and withdrawals for all assets and said services will resume once security is fully verified. The halt has also affected trading dynamics on the exchange, with CryptoQuant CEO Ki Young Ju noting that retail investors are fueling altcoin spikes as arbitrage bots remain offline.

 

Dunamu, Naver set $6.8B growth plan

The security crisis struck at a particularly sensitive moment for Upbit’s operator, Dunamu, overshadowing what was intended to be a celebratory corporate milestone. On that same day, Dunamu, Naver, and Naver Financial held a joint press conference to outline their global expansion strategy. Dunamu brings its blockchain and crypto infrastructure, Naver contributes its position as Korea’s dominant search engine, and Naver Financial adds its payment platform serving 34 million users.

 

The event came after reports that Naver Financial and Dunamu had approved a merger plan through a comprehensive share swap, with the ratio set at 2.54 to 1. The three companies said they will combine their respective strengths to invest 10 trillion won ($6.8 billion) over the next five years in building an ecosystem centered on Web3 and artificial intelligence (AI).


During the press conference, Naver CEO Choi Soo-yeon said no decisions have been made on a Nasdaq listing for the newly combined Naver Financial–Dunamu entity or on whether it might eventually merge with Naver, according to TechM. She said dual listings remain a matter requiring national consensus. Choi also noted that while Naver Financial is a Naver subsidiary, Dunamu is the larger partner, and a later merger between the combined entity and Naver is unlikely.

More to Read
View All
Policy & Regulation·

Dec 08, 2023

Korea invites distinguished financial officials to discuss digital money

Korea invites distinguished financial officials to discuss digital moneyThe Bank of Korea (BOK), South Korea’s central bank, announced on Friday (local time) its participation in an international conference focused on the economic impact and future prospects of digital currencies. This event, co-hosted by the BOK, the Ministry of Economy and Finance (MOEF), the Financial Services Commission (FSC), and the International Monetary Fund (IMF), is scheduled to take place in Seoul on Dec. 14 and 15.The conference, titled “Digital Money: Navigating a Changing Financial Landscape,” is set to welcome high-ranking officials such as Kristalina Georgieva, the Managing Director of the IMF; Choo Kyung-ho, the Minister of the Ministry of Economy and Finance (MOEF); Rhee Chang-yong, the Governor of the Bank of Korea (BOK); and Kim So-young, the Vice Chairman of the Financial Services Commission (FSC). This event is particularly significant as it marks the first visit of IMF head Kristalina Georgieva to South Korea.Photo by pan zhen on UnsplashCrypto, stablecoins, CBDCsDuring the conference, MOEF Minister Choo and FSC Vice Chairman Kim will kick off the event with welcome remarks, followed by a keynote speech from IMF’s Managing Director, Kristalina Georgieva. Spanning over two days, the conference will include seven sessions, covering a diverse range of topics. These sessions will delve into various aspects of digital money, such as practical use cases of digital currencies, regulatory approaches to cryptocurrencies, and discussions on stablecoins and central bank digital currencies (CBDCs).The conference will feature prominent financial officials in both its opening and closing sessions. On the first day, Thursday, a distinguished panel, including IMF Chief Georgieva; Stefan Ingves, the former Governor of Sveriges Riksbank; FSC Vice Chairman Kim; David E. Rutter, the Founder of R3; and Shin Hyun-song, the Economic Adviser at the Bank of International Settlements (BIS), will discuss the opportunities and challenges facing digital money.The final session on Friday will see another group of high-level financial authorities sharing their expertise and insights. This session will include BOK Governor Rhee; Eddie Yue, the Chief Executive of the Hong Kong Monetary Authority; Serey Chea, the Governor of the National Bank of Cambodia; and Veerathai Santiprabhob, the former Governor of the Bank of Thailand. Their discussion will focus on regulatory policies surrounding digital currencies.Live-streaming scheduledThe two sessions of this conference will be accessible to a global audience as they will be live-streamed on the BOK’s official YouTube channel. This provides an opportunity for interested individuals from around the world to tune in and gain insights into the evolving landscape of digital money and its regulatory environment.

news
Web3 & Enterprise·

Jan 05, 2024

Com2uS Platform receives ISMS-P certification for personal information security

Com2uS Holdings subsidiary Com2uS Platform has acquired a certificate of Personal Information and Information Security Management System (ISMS-P), an official certificate distributed by the Korea Internet and Security Agency (KISA), for its blockchain-based game development platform Hive.Photo by Towfiqu barbhuiya on UnsplashStreamlining game developmentHive allows developers to focus on content development by providing functions for game launch and operation in a single software development kit (SDK). It covers all systems needed to run a game, including billing, gameplay across multiple platforms, global login and verification, compliance, support, analytics, promotions, push notifications, community management and blockchain middleware. It is utilized in over 150 games and 41 corporate clients with some 100 million annual users. Robust security measuresTo receive the ISMS-P certification, companies are evaluated based on 101 different criteria, including organizational structure, management of employees and facilities, security of information processing systems and more areas related to handling personal information. "Com2uS Platform and Hive have established and promoted world-class security policies," said Choi Seok-won, CEO of Com2uS Platform. "We will continue to do our best to create an environment where users and customers worldwide can safely enjoy our content." Com2uS Platform also revealed that it runs an office dedicated to information protection, which manages data from Com2uS games and external clients. The company also strives to improve its technological capabilities for enhancing security and conducts annual company-wide training for all employees to raise security awareness. Since 2017, Com2uS Platform has retained its ISMS certification – similar to the ISMS-P but without personal information security standards – to safeguard the information of its users and customers.  

news
Policy & Regulation·

May 19, 2023

BOK Staffers Assess Crypto Market Vulnerabilities and Their Implications

BOK Staffers Assess Crypto Market Vulnerabilities and Their ImplicationsOn Thursday, the Bank of Korea’s (BOK) staff members published an assessment of the vulnerabilities in the cryptocurrency market and their potential implications. Here is the summary of the report.Photo by D Tan on Unsplash2022 crypto winterThroughout 2022, the worldwide crypto market faced a series of adverse occurrences, such as significant drops in the prices of major crypto-assets and the collapse of prominent crypto companies. These events shed light on the vulnerabilities that had accumulated during the rapid growth of the market.The first major event occurred in May 2022 when the algorithmic stablecoin TerraUSD experienced a sharp decline, resulting in substantial losses and bankruptcies for numerous retail investors and crypto firms. This incident significantly eroded confidence in the overall crypto market. The subsequent bankruptcies of prominent crypto lender Celsius and hedge fund Three Arrows Capital (3AC) further highlighted the realization of risks commonly associated with traditional financial markets, such as multiple collateral loans and maturity and liquidity mismatches, within the crypto market.In November 2022, the well-known crypto exchange FTX filed for bankruptcy, demonstrating that the activities of a large crypto company can propagate risks through moral hazard and excessive profit-seeking behavior when it operates outside the realm of regulatory oversight.Similarities with TradFiThese negative events that unfolded in the global crypto market in 2022 share similarities with issues previously observed in financial markets, such as unsustainable business models, liquidity risk, leverage, and lack of transparency in financial conditions. These parallels suggest that if the crypto markets were subjected to comparable levels of regulation as traditional financial markets, it is plausible that the triggering of these risks could have been avoided altogether, or at the very least, the resulting damage could have been mitigated to some extent.Implications for the Korean marketAt present, it is deemed unlikely that events akin to those witnessed in overseas crypto markets will transpire in the Korean market. The Korean crypto-asset market has primarily evolved through exchanges, with limited influence from other enterprises such as crypto issuers and decentralized lending platforms. In addition, Korean crypto exchanges are subject to regulation under the Act on Reporting and Using Specified Financial Transaction Information. This mandates the separation of customer deposits from exchange assets and the strict management of custodial crypto-assets through secure wallets. Additionally, Korean exchanges are prohibited from listing their own tokens on their platforms.However, there remains a dearth of information regarding the business structures of crypto companies that offer services similar to those in the traditional financial industry. This lack of information poses challenges in accurately assessing risk and providing adequate investor protection. Meanwhile, there is a potential for a deeper integration between the crypto market and users’ daily lives, particularly through major technology companies, gaming companies, and security tokens.SuggestionsIt is vital to ensure that crypto-assets are regulated based on the principle of “same activity, same risk, same regulation” through the ongoing development of crypto-asset-related legislation. The Financial Stability Board, an international body monitoring the global financial system, explained this principle in a 2022 paper: “Where crypto-assets and intermediaries perform an equivalent economic function to one performed by instruments and intermediaries of the traditional financial sector, they should be subject to equivalent regulation.”Additionally, it is necessary to stay aligned with major countries in terms of the speed and comprehensiveness of regulatory measures to prevent regulatory discrepancies across borders due to the global nature of crypto risks.Enhancing the effectiveness and efficiency of regulation requires the establishment and maintenance of a close cooperation system between authorities. This collaborative effort should encompass various aspects, including monitoring, information gathering, and supervision of the crypto-asset market. Notably, the widespread adoption of stablecoins can affect the stability of the overall financial system, including monetary systems and payment and settlement systems. Hence, it is necessary to strengthen the involvement of central banks in the monitoring and supervision framework for crypto-assets, including stablecoins, as demonstrated by legislative approaches adopted by major economies like the EU. Furthermore, imposing disclosure requirements, external audits, and documentation submission obligations on crypto-asset operators is advisable.

news
Loading