Top

Upbit suffers $30M breach, overshadowing Dunamu’s major merger announcement

Markets·November 28, 2025, 2:27 AM

South Korea’s largest crypto exchange, Upbit, suffered a security breach on Nov. 27 that resulted in the theft of 44.5 billion won ($30.4 million) in digital assets, all taken from the exchange’s hot wallets. The stolen tokens were all Solana-based, and Upbit CEO Oh Kyoung-suk said in a statement that no users will incur losses, as the company will cover the full amount with its own reserves.

https://asset.coinness.com/en/news/070b84bbeb9f3292d29e545818df0769.webp
Photo by FlyD on Unsplash

Hot-wallet breach hits 24 tokens

The exchange said in a statement that the compromised tokens were transferred to an unknown external wallet at around 7:42 p.m. UTC on Nov. 26. In total, 24 cryptocurrencies were affected, all within the Solana ecosystem. The stolen assets ranged from infrastructure tokens such as Solana (SOL) to staking-related assets like Jito (JTO), along with the stablecoin USD Coin (USDC) and memecoins including Bonk (BONK), Moodeng (MOODENG), and Official Trump (TRUMP).

 

According to Oh, the breach was followed by an emergency security review of the affected networks and wallets. He added that all remaining assets were moved to cold storage to prevent further unauthorized transfers. Oh also said the exchange is working to trace the stolen assets and block on-chain movements wherever possible, noting that Solayer (LAYER) tokens worth 2.3 billion won ($1.6 million) have already been frozen. Upbit is also reaching out to relevant projects and institutions for assistance.

 

This marks Upbit’s second theft case. The first took place on Nov. 27, 2019, exactly six years ago to the day, according to News1.

 

Authorities focus on Lazarus’ involvement

Financial authorities are investigating the incident, and North Korea’s Lazarus Group is being treated as the leading suspect, the Maeil Business Newspaper reported.

 

Lazarus is also believed to have been behind the 58 billion won ($40 million) worth of Ethereum (ETH) stolen from Upbit in 2019. A government official told the paper that the latest breach did not appear to stem from a server intrusion but may have involved a stolen administrator account, allowing the attackers to impersonate internal staff and move assets—similar to the method used in the 2019 case.

 

Security analysts echoed that assessment. One investigator said the stolen funds moved through exchange wallets before being mixed, a pattern often linked to Lazarus. He added that mixers, which are prohibited in Financial Action Task Force (FATF)-member jurisdictions, make tracing difficult and that attackers typically route assets through countries outside that framework, further pointing to North Korea.

 

Following the incident, Upbit suspended deposits and withdrawals for all assets and said services will resume once security is fully verified. The halt has also affected trading dynamics on the exchange, with CryptoQuant CEO Ki Young Ju noting that retail investors are fueling altcoin spikes as arbitrage bots remain offline.

 

Dunamu, Naver set $6.8B growth plan

The security crisis struck at a particularly sensitive moment for Upbit’s operator, Dunamu, overshadowing what was intended to be a celebratory corporate milestone. On that same day, Dunamu, Naver, and Naver Financial held a joint press conference to outline their global expansion strategy. Dunamu brings its blockchain and crypto infrastructure, Naver contributes its position as Korea’s dominant search engine, and Naver Financial adds its payment platform serving 34 million users.

 

The event came after reports that Naver Financial and Dunamu had approved a merger plan through a comprehensive share swap, with the ratio set at 2.54 to 1. The three companies said they will combine their respective strengths to invest 10 trillion won ($6.8 billion) over the next five years in building an ecosystem centered on Web3 and artificial intelligence (AI).


During the press conference, Naver CEO Choi Soo-yeon said no decisions have been made on a Nasdaq listing for the newly combined Naver Financial–Dunamu entity or on whether it might eventually merge with Naver, according to TechM. She said dual listings remain a matter requiring national consensus. Choi also noted that while Naver Financial is a Naver subsidiary, Dunamu is the larger partner, and a later merger between the combined entity and Naver is unlikely.

More to Read
View All
Policy & Regulation·

Sep 20, 2023

Korea’s Legislative Research Body Suggests Expanding Blind Trust System to Include Crypto

Korea’s Legislative Research Body Suggests Expanding Blind Trust System to Include CryptoThe National Assembly Research Service (NARS) of South Korea last Friday issued a report emphasizing the need to broaden the scope of the country’s blind trust system for public officials. Currently, this system primarily covers traditional stocks, but the report highlights the necessity of extending its coverage to include cryptocurrencies.Photo by O-seop Sim on PexelsPublic Service Ethics ActUnder the existing Public Service Ethics Act, public officials holding a rank of 4 or higher within the finance department of the Ministry of Economy and Finance and the Financial Services Commission are mandated to either divest themselves of stocks linked to their official duties and responsibilities or transfer them into a blind trust if the total value of these stocks exceeds KRW 30 million (about $23,000).Blind trustA blind trust is a mechanism through which a public official transfers their stock holdings to a trustee. Subsequently, the trustee handles these entrusted stocks by exchanging them for other assets and overseeing their management, administration, and disposition. Importantly, the original owner of the stock, who is the public official, is barred from participating in these aspects of the trust and is also kept uninformed about the trust property’s status or details.Debate over expansionThe current policy confines the blind trust framework exclusively to stocks. Nevertheless, there is an ongoing debate advocating for the inclusion of other assets, such as virtual assets and real estate, within its scope. The rationale behind this argument is that these types of assets can also potentially give rise to conflicts of interest. However, counterarguments have been raised, expressing concerns that extending the blind trust to these assets could excessively limit the property rights of public officials. Consequently, as of now, this broader application has not been implemented.Comparison with the USThe Korean blind trust system was inspired by the United States’ Ethics in Government Act of 1978, which does not limit the types of assets that can be included in a blind trust. In the US, a blind trust can encompass not only stocks but also bonds, mutual funds, virtual assets, and real estate. In light of this, the report recommends the expansion of the blind trust system to encompass virtual assets and real estate. This step is proposed to prevent conflicts of interest among public officials pertaining to a wider array of asset types.Enhancing trustee discretionMeanwhile, NARS also argued for broadening the trustee’s discretion in trust management to render the system more reasonable. This stems from the concern that the existing uniform property sale approach could lead public servants to incur losses. NARS has proposed potential solutions, such as extending the time limit for property sales or mandating the sale of only a portion of the assets, as viable options to address this issue.

news
Policy & Regulation·

Feb 27, 2024

Korean and U.S. regulators to discuss recognizing NFTs as virtual assets in May

Lee Bok-hyun, the governor of South Korea’s Financial Supervisory Service (FSS), is set to have a meeting with Gary Gensler, the chair of the U.S. Securities and Exchange Commission (SEC), in May. The purpose of their meeting is to discuss whether to classify non-fungible tokens (NFTs) as virtual assets. Currently, NFTs are not seen as virtual assets in Korea, but there is a high likelihood of them being acknowledged as such following the meeting in May, local financial media outlet Edaily reported.Photo by Andrey Metelev on UnsplashLack of definition for NFTsAn NFT is a digital certificate of authenticity that is not fungible or replicable. NFTs tokenize content or assets of various types – from images, music, videos, games and artworks to real-estates – by assigning a unique token ID to them. Many see 2018 as the year NFT technology was first introduced.  Despite its wide range of applications, no legal definition has been made for NFTs. Some view NFTs as technology, and others as virtual assets or securities. The Korean government decided not to recognize NFTs as virtual assets under the Virtual Asset Protection Act (Virtual Asset Act), effective in July. Behind this decision is a perception that NFTs are less likely to pose significant risks to the market, as a large portion of NFTs are now traded by collectors seeking to expand their private collections.  However, NFTs are increasingly seen as speculative destinations by many investors over time, as prices of virtual assets including BTC surge. This shift backs the local movement to recognize NFTs as well as spot bitcoin ETFs as virtual assets. Opposition from NFT businessesBlockchain industry insiders say defining NFTs is of utmost importance, noting that classifying NFTs as virtual assets headfirst could deal a heavy blow to businesses in this sector. One finance insider mentioned that defining NFTs comes down to understanding their purposes and how they are utilized. If NFTs are primarily used for speculative purposes or as currency, they could be recognized as virtual assets, the person said.  The biggest resistance is coming from NFT-related businesses. That is because recognizing NFTs as virtual assets would require these businesses to obtain a virtual asset service provider (VASP) license from the financial authority, which takes significant costs and workforce in the process. A CEO of a blockchain startup, who preferred to remain anonymous, expressed concerns about the possibility of NFTs becoming virtual assets, saying that such recognition would enable NFT transaction tracing, potentially leading to severe violations of human rights. While many industry insiders expect that the financial authorities will bring NFTs under the forthcoming Virtual Asset Act, the FSS stated that no decisions have been made regarding details of the upcoming meeting with the U.S. SEC. 

news
Web3 & Enterprise·

Jan 05, 2024

BingX signs sponsorship deal with English Premier League club

Singapore-based cryptocurrency trading platform BingX has secured a sponsorship deal as the new sleeve sponsor for Premier League football club Chelsea.Photo by Chaos Soccer Gear on UnsplashJanuary 9 debutThe arrangement, spanning the next six months, is expected to debut during Chelsea’s Carabao Cup semi-final first-leg match against Middlesbrough on Jan. 9. As part of this sponsorship, BingX will prominently feature on the front of Chelsea’s training kits for the upcoming 2024/25 season. Meanwhile, the current shirt sponsor, Infinite Athlete, will transition to a training sleeve sponsorship starting next season. While details about the fate of Chelsea’s training kit deal with Trivago, an online hotel booking site, remain uncertain, the club is navigating sponsorship changes in the wake of owner Roman Abramovich’s prior ownership and UK government sanctions. Corporate rebrandEstablished in 2018, BingX operates as a cryptocurrency exchange headquartered in Singapore, catering to a user base of over 10 million in Southeast Asia and North America. In November, the company announced that it was rebranding the business. Part of that process was understood to involve an overhaul of BingX’s visual identity, with the introduction of a streamlined logo. Sponsorship within the English Premier League is a high profile marketing move that will undoubtedly bring more visibility to that brand. Crypto marketing spend reboundThe marketing spend of crypto firms relative to high profile sponsorship deals has recovered significantly in recent months. Such sponsorship deals peaked at the top of the crypto market in 2021. That period saw profligate spending by many of the large crypto platforms. A standout example was provided by the $135 million sponsorship deal signed by fraudulently run crypto exchange FTX for the Miami Heat stadium naming rights in the United States. While that opulent sponsorship spending subsided during the bear market, it appears that there has been a modest resurgence as market conditions have improved. Seychelles-based crypto platform OKX has ongoing marketing relationships with the McLaren Formula One racing team and Manchester City Football Club. In March, U.S.-based crypto exchange Kraken announced a marketing partnership with the Williams Formula One racing team. Earlier this week it emerged that crypto gambling platform Stake.com had signed a sponsorship deal with the Sauber Formula One team. 18 of the 20 English Premier League clubs are now understood to have agreed sponsorship deals at one time or another with crypto companies. This demonstrates the growing trend of cryptocurrency platforms associating with high-profile sports partnerships, enhancing their visibility and influence in the market. Chelsea is actively seeking a front-of-shirt sponsorship deal, considering potential collaborations, including discussions with Saudi national carrier Riyadh Air. It’s understood that the BingX deal has been agreed for in excess of £10 million ($12.7 million) per season.

news
Loading