Top

Upbit suffers $30M breach, overshadowing Dunamu’s major merger announcement

Markets·November 28, 2025, 2:27 AM

South Korea’s largest crypto exchange, Upbit, suffered a security breach on Nov. 27 that resulted in the theft of 44.5 billion won ($30.4 million) in digital assets, all taken from the exchange’s hot wallets. The stolen tokens were all Solana-based, and Upbit CEO Oh Kyoung-suk said in a statement that no users will incur losses, as the company will cover the full amount with its own reserves.

https://asset.coinness.com/en/news/070b84bbeb9f3292d29e545818df0769.webp
Photo by FlyD on Unsplash

Hot-wallet breach hits 24 tokens

The exchange said in a statement that the compromised tokens were transferred to an unknown external wallet at around 7:42 p.m. UTC on Nov. 26. In total, 24 cryptocurrencies were affected, all within the Solana ecosystem. The stolen assets ranged from infrastructure tokens such as Solana (SOL) to staking-related assets like Jito (JTO), along with the stablecoin USD Coin (USDC) and memecoins including Bonk (BONK), Moodeng (MOODENG), and Official Trump (TRUMP).

 

According to Oh, the breach was followed by an emergency security review of the affected networks and wallets. He added that all remaining assets were moved to cold storage to prevent further unauthorized transfers. Oh also said the exchange is working to trace the stolen assets and block on-chain movements wherever possible, noting that Solayer (LAYER) tokens worth 2.3 billion won ($1.6 million) have already been frozen. Upbit is also reaching out to relevant projects and institutions for assistance.

 

This marks Upbit’s second theft case. The first took place on Nov. 27, 2019, exactly six years ago to the day, according to News1.

 

Authorities focus on Lazarus’ involvement

Financial authorities are investigating the incident, and North Korea’s Lazarus Group is being treated as the leading suspect, the Maeil Business Newspaper reported.

 

Lazarus is also believed to have been behind the 58 billion won ($40 million) worth of Ethereum (ETH) stolen from Upbit in 2019. A government official told the paper that the latest breach did not appear to stem from a server intrusion but may have involved a stolen administrator account, allowing the attackers to impersonate internal staff and move assets—similar to the method used in the 2019 case.

 

Security analysts echoed that assessment. One investigator said the stolen funds moved through exchange wallets before being mixed, a pattern often linked to Lazarus. He added that mixers, which are prohibited in Financial Action Task Force (FATF)-member jurisdictions, make tracing difficult and that attackers typically route assets through countries outside that framework, further pointing to North Korea.

 

Following the incident, Upbit suspended deposits and withdrawals for all assets and said services will resume once security is fully verified. The halt has also affected trading dynamics on the exchange, with CryptoQuant CEO Ki Young Ju noting that retail investors are fueling altcoin spikes as arbitrage bots remain offline.

 

Dunamu, Naver set $6.8B growth plan

The security crisis struck at a particularly sensitive moment for Upbit’s operator, Dunamu, overshadowing what was intended to be a celebratory corporate milestone. On that same day, Dunamu, Naver, and Naver Financial held a joint press conference to outline their global expansion strategy. Dunamu brings its blockchain and crypto infrastructure, Naver contributes its position as Korea’s dominant search engine, and Naver Financial adds its payment platform serving 34 million users.

 

The event came after reports that Naver Financial and Dunamu had approved a merger plan through a comprehensive share swap, with the ratio set at 2.54 to 1. The three companies said they will combine their respective strengths to invest 10 trillion won ($6.8 billion) over the next five years in building an ecosystem centered on Web3 and artificial intelligence (AI).


During the press conference, Naver CEO Choi Soo-yeon said no decisions have been made on a Nasdaq listing for the newly combined Naver Financial–Dunamu entity or on whether it might eventually merge with Naver, according to TechM. She said dual listings remain a matter requiring national consensus. Choi also noted that while Naver Financial is a Naver subsidiary, Dunamu is the larger partner, and a later merger between the combined entity and Naver is unlikely.

More to Read
View All
Web3 & Enterprise·

Apr 26, 2024

Phemex introduces Lending Protocol and Pulse Season 3

Stella Chan, the chief operating officer of Phemex, a crypto derivatives exchange with a presence in Turkey and Singapore, recently provided details of the company’s unveiling of its Lending Protocol and SocialFi initiative Pulse Season 3. In an interview with Cointelegraph, Chan outlined that since the founding of the firm in 2019, the company has been evolving and working towards carving out a niche for itself in the industry. The executive confirmed that the exchange business has reached a point where daily trading volume now exceeds $2 billion across more than 300 trading pairs. Pulse Season 3Chan is also the co-founder of Phemex’s Pulse, a social trading platform that rewards users while attempting to foster a community spirit within the crypto sphere. As part of Phemex events held at Token 2024 in Dubai last week, the company announced Pulse Season 3, a SocialFi mechanism to incentivize community engagement. The initiative introduces casting and tipping features. Casting is a means through which community members can post up content. Meanwhile, tipping serves as a method through which other community members can acknowledge and reward high-quality community member contributions. Through this initiative Phemex is hoping to deliver an enhanced experience where trading seamlessly intersects with trending topics and insightful content.Photo by Shubham Dhage on UnsplashPhemex Lending ProtocolAlongside Pulse Season 3, the company has also launched the Phemex Lending Protocol, a feature allowing users to borrow crypto at competitive rates while earning interest. As part of that offering, all loans are safeguarded through the collateralization of the user’s digital assets. With an initial liquidity allocation of $22 million, this protocol has been established with an eye towards empowering traders to amplify their capital without selling their assets, while aligning in a more general sense with the user’s overall trading needs. Phemex is attempting to spearhead the transition towards greater user autonomy without compromising security. The Phemex Lending Protocol is central to that effort, offering users competitive borrowing rates and opportunities for passive income generation.  Standing testament to that, the platform offers interest rates on USDT starting at 3.57%. For those that hold vePT, the wrapped version of the platform's native Phemex token (PT), an additional 30% discount on borrowing rates is being offered. vePT is destined to act as a token which confers voting authority in the not too distant future, relative to Phemex’s governing decentralized autonomous organization (DAO). The platform is further enabling capital efficiency from the service user’s perspective by applying very little restriction so that funds can be withdrawn and redeployed at will, with minimum delay. Coming off the back of these announcements during Token 2024, the company appears to be following through on that momentum. Taking to the X social media platform on April 25, Chan outlined details of a plethora of user experience (UX) upgrades relative to its Pulse offering. Future plansLooking ahead, Phemex envisages the offering of a broader range of products tailored to user needs. Plans for an automated market maker (AMM) protocol aim to provide users with passive earning opportunities by contributing to liquidity. Additionally, Phemex is exploring the development of an on-chain credit scoring mechanism, leveraging its soulbound digital identity token to enhance access to decentralized finance (DeFi).

news
Policy & Regulation·

Apr 11, 2023

Hong Kong Setting High Bar on Crypto Rules

Hong Kong Setting High Bar on Crypto RulesLucy Gazmararian, a Fintech Advisory Group member of Hong Kong’s Securities and Futures Commission (SFC) and founder of crypto venture firm Token Bay Capital has said that the standards for Virtual Asset Service Providers (VASPs) in Hong Kong are incredibly high.©Pexels/Brayden LawThe Securities and Futures Commission (SFC) has established these strict guidelines as they want the crypto industry to adhere to the same compliance standards as traditional financial firms.Gazmararian made the comments in discussion with Cointelegraph on the fringes of the Hong Kong WOW Summit. Although the bar is set high, Gazmararian maintains that it is not without good reason. The SFC’s approach is to ask VASPs to apply the same standards that existing financial institutions such as huge banks and asset managers must comply with.Short term challengesAccording to a consultation paper released by the SFC on February 20th, licensed VASPs may serve retail investors, but the standard of investor protection measures imposed needs to be considered. Additionally, Anti-Money Laundering (AML) and Know Your Customer (KYC) policies were also discussed.While these high standards may benefit the industry in the long run, Gazmararian believes they may pose challenges for the crypto industry in Hong Kong over the short term. She explained that many crypto businesses are in the startup phase and have funding but not huge amounts. Therefore, complying with the framework may incur significant costs. Gazmararian mentioned the need for local VASPs to have insurance, independent assessment reports, and store crypto in cold storage. It is important to note that these costs may prevent some startups from entering the market, which may have consequences on the industry’s growth in Hong Kong.The Token Bay Capital founder believes that with a solid regulatory framework in place, more well-capitalized financial firms will be willing to help promising startups get off the ground. In her opinion, the companies that receive a license will be upholding the most stringent standards.Ambitions to be global crypto hubThe SFC has encouraged individuals, corporations, and crypto firms to review the 361-page consultation paper and provide feedback. The securities regulator wants these entities to share their views and point to things that may have been missed. According to Gazmararian, the SFC is “absolutely focused” on getting everything right, so they are seeking input from a wide range of sources.Submissions for feedback on the consultation paper closed on March 31. Hong Kong has made significant strides in recent months to establish itself as the world’s next crypto hub. According to a March 20 statement by the Secretary for Financial Services and the Treasury, Christian Hui, more than 80 digital asset firms have expressed interest in establishing a presence in Hong Kong over the last few months. This interest is a testament to the growing importance of the crypto industry and the favorable environment that Hong Kong is creating for its growth.

news
Policy & Regulation·

May 16, 2023

China’s Fuzhou City Offers Incentives to Entice Blockchain Start-Ups

China’s Fuzhou City Offers Incentives to Entice Blockchain Start-UpsAdministrators in Fuzhou city, the capital and one of the largest cities in China’s Fujian Province, have introduced a raft of policies aimed at enticing blockchain-centric companies to establish themselves in the city.Photo by 尧智 林 on UnsplashMonetary rewardsThe measures are understood to include rent subsidies applicable to the use of commercial office space in the city, as well as the payment of cash rewards based on such start-up businesses hitting various revenue targets. The cash reward incentives are being capped at 500,000 yuan, around $71,800 US dollars, for each applicable project.The city administrators are also offering cash rewards to institutions within the city area and local blockchain firms in cases where they attain government-issued certifications. Another category through which these entities can reap more cash rewards is in providing training services centered upon blockchain technology.A blockchain firm basing itself within the city limits that is successful in attaining state certification reflecting its status as a national level laboratory specializing in blockchain technologies may be awarded as much as 1 million yuan ($144,000).Rent subsidiesThree specific industrial locations are applicable where the rent subsidy is concerned. Blockchain-based businesses wanting to avail of that incentive will have access to an annual rent subsidy of up to 600,000 yuan ($86,300) for every 1,000 square meters of commercial office space that they rent.Stepping up activityThere seems to be heightened activity related to various aspects of blockchain-related technology within China’s borders in recent months. It appears that while the country is taking the initiative with blockchain-related technology, that excludes the development of or open market use of decentralized cryptocurrencies.China has been pursuing a policy of pushing cryptocurrency beyond its borders in recent years, to include bans on cryptocurrency exchanges and crypto miners. However, over recent months, it is allowing this segment of the overall blockchain innovation to develop within the autonomous Chinese territory of Hong Kong. In fact, it’s actively encouraging it. It’s quite a savvy move by the Chinese who don’t want their citizens using decentralized cryptocurrency generally but are quite happy to still participate on a global level in that sector, by having Hong Kong make efforts to become a regional crypto hub.A second strand to its overall strategy appears to be a concerted effort to expand the user base within China of the digital yuan, its central bank digital currency (CBDC). A series of initiatives have been rolled out in an effort to bring the CBDC into active use. China remains the global leader in CBDC development, much further along in that process than its international peers.Lastly, it’s strategically pursuing the development of blockchain-related business, just as this initiative in Fuzhou indicates. The local government initiative is not an isolated one. Last Wednesday, China’s National Blockchain Technology Innovation Center was formally launched. As far back as 2019, Beijing-based smart contract platform Trias has been assisting authorities in Fuzhou in utilizing blockchain in an effort to better manage its electrical grid infrastructure.

news
Loading