Top

Upbit suffers $30M breach, overshadowing Dunamu’s major merger announcement

Markets·November 28, 2025, 2:27 AM

South Korea’s largest crypto exchange, Upbit, suffered a security breach on Nov. 27 that resulted in the theft of 44.5 billion won ($30.4 million) in digital assets, all taken from the exchange’s hot wallets. The stolen tokens were all Solana-based, and Upbit CEO Oh Kyoung-suk said in a statement that no users will incur losses, as the company will cover the full amount with its own reserves.

https://asset.coinness.com/en/news/070b84bbeb9f3292d29e545818df0769.webp
Photo by FlyD on Unsplash

Hot-wallet breach hits 24 tokens

The exchange said in a statement that the compromised tokens were transferred to an unknown external wallet at around 7:42 p.m. UTC on Nov. 26. In total, 24 cryptocurrencies were affected, all within the Solana ecosystem. The stolen assets ranged from infrastructure tokens such as Solana (SOL) to staking-related assets like Jito (JTO), along with the stablecoin USD Coin (USDC) and memecoins including Bonk (BONK), Moodeng (MOODENG), and Official Trump (TRUMP).

 

According to Oh, the breach was followed by an emergency security review of the affected networks and wallets. He added that all remaining assets were moved to cold storage to prevent further unauthorized transfers. Oh also said the exchange is working to trace the stolen assets and block on-chain movements wherever possible, noting that Solayer (LAYER) tokens worth 2.3 billion won ($1.6 million) have already been frozen. Upbit is also reaching out to relevant projects and institutions for assistance.

 

This marks Upbit’s second theft case. The first took place on Nov. 27, 2019, exactly six years ago to the day, according to News1.

 

Authorities focus on Lazarus’ involvement

Financial authorities are investigating the incident, and North Korea’s Lazarus Group is being treated as the leading suspect, the Maeil Business Newspaper reported.

 

Lazarus is also believed to have been behind the 58 billion won ($40 million) worth of Ethereum (ETH) stolen from Upbit in 2019. A government official told the paper that the latest breach did not appear to stem from a server intrusion but may have involved a stolen administrator account, allowing the attackers to impersonate internal staff and move assets—similar to the method used in the 2019 case.

 

Security analysts echoed that assessment. One investigator said the stolen funds moved through exchange wallets before being mixed, a pattern often linked to Lazarus. He added that mixers, which are prohibited in Financial Action Task Force (FATF)-member jurisdictions, make tracing difficult and that attackers typically route assets through countries outside that framework, further pointing to North Korea.

 

Following the incident, Upbit suspended deposits and withdrawals for all assets and said services will resume once security is fully verified. The halt has also affected trading dynamics on the exchange, with CryptoQuant CEO Ki Young Ju noting that retail investors are fueling altcoin spikes as arbitrage bots remain offline.

 

Dunamu, Naver set $6.8B growth plan

The security crisis struck at a particularly sensitive moment for Upbit’s operator, Dunamu, overshadowing what was intended to be a celebratory corporate milestone. On that same day, Dunamu, Naver, and Naver Financial held a joint press conference to outline their global expansion strategy. Dunamu brings its blockchain and crypto infrastructure, Naver contributes its position as Korea’s dominant search engine, and Naver Financial adds its payment platform serving 34 million users.

 

The event came after reports that Naver Financial and Dunamu had approved a merger plan through a comprehensive share swap, with the ratio set at 1 to 2.54. The three companies said they will combine their respective strengths to invest 10 trillion won ($6.8 billion) over the next five years in building an ecosystem centered on Web3 and artificial intelligence (AI).


During the press conference, Naver CEO Choi Soo-yeon said no decisions have been made on a Nasdaq listing for the newly combined Naver Financial–Dunamu entity or on whether it might eventually merge with Naver, according to TechM. She said dual listings remain a matter requiring national consensus. Choi also noted that while Naver Financial is a Naver subsidiary, Dunamu is the larger partner, and a later merger between the combined entity and Naver is unlikely.

More to Read
View All
Web3 & Enterprise·

Dec 18, 2023

NEOPIN and Finschia Foundation to jointly launch Finschia’s first decentralized exchange

NEOPIN and Finschia Foundation to jointly launch Finschia’s first decentralized exchangeCentralized decentralized finance (CeDeFi) protocol NEOPIN and blockchain developer Finschia Foundation have teamed up to launch Finschia Network Swap (FNSwap) — the first automated market maker (AMM) decentralized exchange on Finschia’s public blockchain — in the first quarter of next year, according to an announcement on Finschia’s official website last Friday (KST).Photo by Chris Liverani on UnsplashRevolutionizing DeFiNEOPIN has taken over the development of FNSwap, which will employ a pricing algorithm as an AMM decentralized exchange to set the prices of assets, thus increasing liquidity in liquidity pools. The platform will support crypto deposits, including those made in FNSA and NPT — Finschia and NEOPIN’s respective governance tokens — along with other stablecoins. The list of supported cryptocurrencies will be expanded later on as the mainnet grows, Finschia said.“As Finschia’s first decentralized exchange, Finschia Network Swap is expected to make it more convenient for many users to use crypto services,” said Kim Yong-gi, CEO of NEOPIN. “We plan to actively expand the number of cryptocurrencies supported on the platform in line with the expansion of the Finschia ecosystem.”Ecosystem expansionFNSwap will also be centered around its community of users, providing lucrative DeFi products and incentives like token swapping, staking and rewards, thus establishing a secure and convenient blockchain ecosystem.The two firms committed to exploring other endeavors as well, such as discovering promising Web3 projects through events like hackathons; facilitating interaction between their respective partner firms; and conducting joint promotional campaigns to expand the Finschia ecosystem.“We are pleased to work with NEOPIN to launch the first decentralized exchange of the Finschia ecosystem,” said Ko Young-soo, Chairman of the Finschia Foundation. “We will consistently provide the technical support that NEOPIN needs to successfully launch the Finschia Network Swap.”

news
Web3 & Enterprise·

Sep 12, 2023

Animoca Brands Secures Funding to Expand Web3 Identity Project

Animoca Brands Secures Funding to Expand Web3 Identity ProjectHong Kong-based Web3 firm Animoca Brands has successfully raised $20 million in a recent funding round, signaling a significant boost for its Web3 identity project, Mocaverse.Photo by Markus Winkler on UnsplashCMCC Global leads funding roundThe funding, announced via a blog post published to the firm’s website on Monday, was spearheaded by CMCC Global, a Hong Kong-headquartered venture capital firm that focuses solely on blockchain-related investments. Additionally, the round saw participation from prominent investors including Kingsway Capital, Liberty City Ventures, and GameFi Ventures.Prominent individuals within the industry also contributed, including Aleksander Larsen, Co-Founder of Sky Mavis, the developer of well-known blockchain play-to-earn game Axie Infinity, and Gabby Dizon, Founder of Yield Guild Games.Mocaverse, Animoca Brands’ ambitious project, is dedicated to the development of Web3-native tools catering to the gaming and entertainment sectors. This funding round points to the growing recognition of Web3’s potential to transform digital identities, particularly so within the areas of gaming, culture, and entertainment.Aiming to redefine Web3 user engagementMocaverse aims to redefine how users engage with these sectors by providing innovative solutions and unique experiences. One noteworthy aspect of this funding initiative is Animoca Brands’ commitment to granting investors “a free-attaching utility token warrant on a 1:1 dollar basis.” This strategic move not only bolsters investor confidence but also aligns their interests with the long-term success of Mocaverse.The injection of capital will be instrumental in advancing the Mocaverse project, with the imminent launch of Moca ID being a key milestone. Moca ID, a non-transferrable NFT collection, empowers users to create and nurture their on-chain identities, offering exclusive access to the Mocaverse ecosystem and the opportunity to earn loyalty points through active participation.Yat Siu, Co-Founder and Executive Chairman of Animoca Brands, who also participated in this funding round on a personal basis, expressed his vision for Mocaverse, stating:“The ongoing evolution of the Internet involves a shift from hierarchical power structures to autonomous ones, and the DAO-based approach of Mocaverse ensures that its community will be focused on driving innovation and collaboration across the broader Animoca Brands ecosystem.”Siu emphasized that Mocaverse’s scope extends beyond individual empowerment. It is poised to serve as a digital identity, reputation, and loyalty system for various decentralized organizations.Web3 thought leadershipThe Animoca Brands Co-Founder is catching the public eye with his commentary and thought leadership relative to the fledgling Web3 sector. In an interview last week, Siu voiced his belief that Saudi Arabia is proactively nurturing blockchain gaming, revealing that Animoca itself has partnered with the Gulf state on a Web3-related project.Giving a keynote speech at the Ethereum Community Conference (EthCC) in Paris in July, he voiced his opinion that Hong Kong’s recent crypto development has been sanctioned by mainland China.The $20 million raised signifies a significant stride toward realizing the potential of Web3 technology in shaping the future of gaming, culture, and entertainment. With Mocaverse at the forefront, Animoca Brands is poised to attempt to create a vibrant ecosystem where users can actively engage, redefine their digital identities, and unlock new economic opportunities, all within a collaborative and decentralized framework.

news
Web3 & Enterprise·

Aug 01, 2023

Hong Kong’s Largest Bank in Lackluster Crypto Embrace

Hong Kong’s Largest Bank in Lackluster Crypto EmbraceFor all of its pro-crypto initiatives Hong Kong has been struggling with banking crypto companies. A recent report from the Hong Kong Economic Journal cited Lin Yansheng, Director of Commercial Banking at Hang Seng Bank, Hong Kong’s largest local bank, in outlining that the bank will accommodate crypto but that support is conditional.Photo by Florian Wehde on UnsplashCrypto in a high rates environmentYansheng shared his insights on interest rates, stating that he believes that interest rates will rise but reassures that any increase will be temporary in nature.The Commercial Banking Director acknowledged that Hong Kong’s current high-interest rates, in contrast to those of mainland China and neighboring regions, have caused a slowdown in the overall demand for bank loans. He predicts that loan growth will face pressure this year. However, he also offers a glimmer of hope, stating that a reduction in interest rates may not be far off. He suggests that next year’s expected interest rate cuts could lead to an improvement in loan growth.Data published recently by the Hong Kong Monetary Authority (HKMA) shows that annualized loan growth has been negative since May. It currently stands at -1.1%. Yansheng explained that as borrowing rates decrease in mainland China, Hong Kong’s banking industry is experiencing a downturn in loan growth. The high Hong Kong dollar interbank offered rate (HIBOR) currently limits the volume of corporate borrowing.The rising concerns over interest rates have prompted Hang Seng Bank to acknowledge the importance of cryptocurrencies.Unconvincing crypto embraceThe bank recently outlined the regulatory framework for virtual asset businesses seeking to operate within its purview. To open standard banking accounts, these businesses must obtain an Approval-in-Principle (AIP) license from the Securities Regulatory Commission (SRC), as per the bank’s announcement.The first issue is that obtaining an AIP license has proven to be incredibly difficult. Currently, only OSL and HashKey, two virtual asset trading platforms, have managed to obtain the required clearance. Hang Seng Bank acknowledges that it hasn’t received many inquiries about crypto-banking, attributing it to that challenging process of obtaining AIP certification. Meeting the demanding requirements for such permission poses a significant hurdle for most businesses.Getting beyond this obstacle, Yansheng clarified that even then crypto companies will only be able to obtain a “simple” bank account. He didn’t clarify what services would be excluded but Hang Seng’s embrace of crypto-related business sounds very much like it’s lacking in conviction.Both the China Securities Regulatory Commission and the Hong Kong Monetary Authority have conducted roundtable meetings to address the difficulties faced by virtual asset businesses. Yansheng reiterated Hang Seng’s commitment to complying with the regulators’ instructions and accommodating these companies. However, it’s clear that difficulties remain.Last month, it was reported that Hang Seng Investment Management Co., a wholly-owned subsidiary of Hang Seng Bank and the largest exchange-traded fund (ETF) manager in Hong Kong, was looking to add digital assets to its product line.

news
Loading