Top

Upbit suffers $30M breach, overshadowing Dunamu’s major merger announcement

Markets·November 28, 2025, 2:27 AM

South Korea’s largest crypto exchange, Upbit, suffered a security breach on Nov. 27 that resulted in the theft of 44.5 billion won ($30.4 million) in digital assets, all taken from the exchange’s hot wallets. The stolen tokens were all Solana-based, and Upbit CEO Oh Kyoung-suk said in a statement that no users will incur losses, as the company will cover the full amount with its own reserves.

https://asset.coinness.com/en/news/070b84bbeb9f3292d29e545818df0769.webp
Photo by FlyD on Unsplash

Hot-wallet breach hits 24 tokens

The exchange said in a statement that the compromised tokens were transferred to an unknown external wallet at around 7:42 p.m. UTC on Nov. 26. In total, 24 cryptocurrencies were affected, all within the Solana ecosystem. The stolen assets ranged from infrastructure tokens such as Solana (SOL) to staking-related assets like Jito (JTO), along with the stablecoin USD Coin (USDC) and memecoins including Bonk (BONK), Moodeng (MOODENG), and Official Trump (TRUMP).

 

According to Oh, the breach was followed by an emergency security review of the affected networks and wallets. He added that all remaining assets were moved to cold storage to prevent further unauthorized transfers. Oh also said the exchange is working to trace the stolen assets and block on-chain movements wherever possible, noting that Solayer (LAYER) tokens worth 2.3 billion won ($1.6 million) have already been frozen. Upbit is also reaching out to relevant projects and institutions for assistance.

 

This marks Upbit’s second theft case. The first took place on Nov. 27, 2019, exactly six years ago to the day, according to News1.

 

Authorities focus on Lazarus’ involvement

Financial authorities are investigating the incident, and North Korea’s Lazarus Group is being treated as the leading suspect, the Maeil Business Newspaper reported.

 

Lazarus is also believed to have been behind the 58 billion won ($40 million) worth of Ethereum (ETH) stolen from Upbit in 2019. A government official told the paper that the latest breach did not appear to stem from a server intrusion but may have involved a stolen administrator account, allowing the attackers to impersonate internal staff and move assets—similar to the method used in the 2019 case.

 

Security analysts echoed that assessment. One investigator said the stolen funds moved through exchange wallets before being mixed, a pattern often linked to Lazarus. He added that mixers, which are prohibited in Financial Action Task Force (FATF)-member jurisdictions, make tracing difficult and that attackers typically route assets through countries outside that framework, further pointing to North Korea.

 

Following the incident, Upbit suspended deposits and withdrawals for all assets and said services will resume once security is fully verified. The halt has also affected trading dynamics on the exchange, with CryptoQuant CEO Ki Young Ju noting that retail investors are fueling altcoin spikes as arbitrage bots remain offline.

 

Dunamu, Naver set $6.8B growth plan

The security crisis struck at a particularly sensitive moment for Upbit’s operator, Dunamu, overshadowing what was intended to be a celebratory corporate milestone. On that same day, Dunamu, Naver, and Naver Financial held a joint press conference to outline their global expansion strategy. Dunamu brings its blockchain and crypto infrastructure, Naver contributes its position as Korea’s dominant search engine, and Naver Financial adds its payment platform serving 34 million users.

 

The event came after reports that Naver Financial and Dunamu had approved a merger plan through a comprehensive share swap, with the ratio set at 2.54 to 1. The three companies said they will combine their respective strengths to invest 10 trillion won ($6.8 billion) over the next five years in building an ecosystem centered on Web3 and artificial intelligence (AI).


During the press conference, Naver CEO Choi Soo-yeon said no decisions have been made on a Nasdaq listing for the newly combined Naver Financial–Dunamu entity or on whether it might eventually merge with Naver, according to TechM. She said dual listings remain a matter requiring national consensus. Choi also noted that while Naver Financial is a Naver subsidiary, Dunamu is the larger partner, and a later merger between the combined entity and Naver is unlikely.

More to Read
View All
Web3 & Enterprise·

Oct 25, 2023

Bithumb to Launch Entrepreneurship Support Program

Bithumb to Launch Entrepreneurship Support ProgramSouth Korean cryptocurrency exchange Bithumb announced on Wednesday (local time) the launch of an entrepreneurship support program to commemorate its upcoming 10th anniversary. The initiative aims to discover and nurture promising young entrepreneurs with innovative ideas to grow the industry and drive business augmentation. It is divided into two parts: an entrepreneurship competition and an investment of KRW 30 billion (approximately $22 million) to support early-stage startups.“It is time for us to support startups and bring them one step closer to success,” said the exchange’s CEO Lee Jae-won.Photo by Hunters Race on UnsplashProgram detailsThe entrepreneurship competition is open to individuals, groups, and small and medium-sized enterprises (SMEs) based in Korea that are planning to start a business or have been in operation for less than three years. Participants in any and all fields of business are eligible to enter. It offers startup grants of KRW 100 million ($74,000) for one first-place winner, KRW 70 million for three second-place winners, and KRW 30 million for six third-place winners. Winners will also receive investor relations (IR) consultations and marketing opportunities to attract future investments.Meanwhile, the KRW 30 billion investment project is open to local startups in any field that have been in operation for less than three years. Evaluators will place emphasis on how innovative or profitable the businesses are deemed, Bithumb said.“Our entrepreneurship support program is not limited to one-time support. We will strive to contribute to society by supporting entrepreneurship in various fields — not just the crypto industry — for sustained mutual growth,” Lee added.Application process datesThe application period is from November 1 to 30, and the results of the first round of applications will be announced on January 4. Those who pass the first round will be called in for an on-site evaluation. The final pool of applicants chosen for participation and investment will be announced in February.

news
Web3 & Enterprise·

Oct 17, 2023

Haru Invest Considers Server Suspension as Troubles Persist

Haru Invest Considers Server Suspension as Troubles PersistIn the wake of halting withdrawals in June, Haru Invest, a Singapore-headquartered cryptocurrency platform, is contemplating the suspension of its server. This decision is part of the firm’s ongoing efforts to streamline operations and reduce maintenance costs.Photo by David Guenther on UnsplashCost reductionCEO Hugo Lee made the announcement on Monday, underscoring the significant burden of server maintenance costs on the company’s finances. He acknowledged that this cost represents a substantial portion of their fixed expenses and is thus a top priority for the firm.Lee disclosed:“We plan to suspend the service in a few weeks, backing up all member information.”However, he also noted that the company is yet to finalize a concrete plan for the server suspension.The move to shut down the server aligns with Haru Invest’s broader strategy to lower all costs associated with its services. Lee explained:“Some of the current fixed expenditures include the upkeep of Haru Invest services, the cost of workspace like the office, and the cost of communication with our members.”The company is actively seeking ways to reduce these expenses and preserve its assets.Asset distributionAdditionally, Lee assured users that the assets conserved thus far would be included in the distribution to those who have had their funds locked on the platform since June, offering a glimmer of hope to impacted users.Nevertheless, the announcement of the server suspension has raised concerns within the Haru Invest community. Some users have expressed skepticism about the purported high costs of server maintenance, believing the firm’s claim to be exaggerated.One user, voicing this discontent, commented on Haru Invest’s Telegram channel, “Server costs cost nothing.” Another remarked: “Servers are gone soon guys, huge costs, 200 USD a month.” According to industry standards, the maintenance costs for running a server for a small to medium-sized business typically range between $35 to $500 per month.Unhappy platform usersLee’s statement regarding the impending server suspension follows the platform’s earlier decision to terminate deposits and withdrawals in June. This decision was coupled with the closure of Haru Invest’s offices and the dismissal of numerous employees, as reported by local news agencies.Haru Invest attributed these issues to the fraudulent activities of the consignment operator B&S Holdings, formerly known as Aventus. While some investors accused the firm of orchestrating a “rug pull,” Haru Invest denied these allegations and maintained its innocence. One user posted the following claim on X (formerly Twitter) last week: “Rugpull. If justice is served, the scammers will be behind bars.”In a bid to address concerns over its corporate rehabilitation application, Lee appeared in court in September, emphasizing that Haru Invest was actively cooperating with investigating agencies. However, the company has yet to provide a timeline for the recovery of users’ assets as of early October.Lee also addressed the matter in Monday’s statement: “We are also responding to the rehabilitation proceedings that some of our members have filed with the court as mentioned in our previous announcement, in addition to actively cooperating with other authorities’ investigations. ”Haru Invest is reportedly facing a class-action lawsuit with disgruntled investors alleging fraud.

news
Web3 & Enterprise·

Sep 02, 2023

TRYB Emerges as Turkish Alternative to Dollar-Pegged Stablecoins

TRYB Emerges as Turkish Alternative to Dollar-Pegged StablecoinsIn a market typically dominated by dollar-backed stablecoins like Tether (USDT) and USD Coin (USDC), a new player has emerged in Turkey to operate alongside those dominant stablecoins.According to a report by CoinDesk on Friday, BiLira’s TRYB stablecoin, pegged to the Turkish lira (TRY), has rapidly climbed the ranks to become the world’s second-largest non-US dollar-pegged stablecoin. It currently trails Tether’s euro-pegged EURt, which according to Coingecko data, currently holds a market cap of $221 million. In just three weeks, TRYB has skyrocketed, quadrupling its market cap to $136.10 million.Photo by Oleksandr P on PexelsMarket cap volatilityHowever, TRYB's market cap had fallen off a cliff on Friday, dropping from $135 million earlier in the day to $40 million. TRYB, an Ethereum-based stablecoin, offers a unique proposition in that it is pegged to the Turkish lira, allowing users to exchange 1 TRYB for 1 TRY. The stablecoin offering, which is administered by Istanbul-based BiLira, is underpinned by 100% fiat reserves held in Turkish banks.The Turkish lira has earned its reputation as one of the most volatile fiat currencies globally, often experiencing fluctuations against the US dollar. Over the course of the last five years, the currency has lost 94% of its value when benchmarked against the performance of the US dollar.In response to this volatility, TRYB has found its purpose as a medium of exchange. It can act as a gateway to transition user’s Turkish lira into cryptocurrencies and vice versa. This trend aligns with the global use of stablecoins as the foundation of crypto trading pairs, providing traders with a stable asset while sidestepping fiat currency’s unpredictability.Exiting the liraThe US Federal Reserve acknowledged the significance of stablecoins in December 2022, highlighting their role in facilitating crypto trades, serving as collateral for crypto loans, and minimizing inefficiencies tied to fiat-to-crypto conversions. In fact, stablecoins account for over 80% of the trading volume on centralized exchanges, attesting to their pivotal role in the crypto ecosystem.It’s likely that the Lira-pegged stablecoin will act as a means to access other cryptocurrencies and US dollar-pegged stablecoins like USDT and USDC, rather than be considered as a rival or replacement. That’s by virtue of the ongoing difficulties of the Turkish sovereign currency which it tracks. So long as the lira continues to erode in terms of buying power, it’s likely that citizens will be looking for avenues to escape from that erosion of value.Increased interest in cryptoGiven this monetary backdrop in Turkey, it shouldn’t surprise anyone to learn that interest in crypto is on the rise. In a recent report published by Seychelles-based cryptocurrency exchange KuCoin earlier this week, a significant increase in the number of crypto investors in Turkey over the course of the past eighteen months has been identified.The report found that 52% of the adult Turkish population have participated in crypto-related investments. Over the past 18 months, the number of Turkish adults embracing crypto has risen to that 52% level from 40%.

news
Loading