Replace Nov. 27, 9:23 am UTC: This text has been up to date to incorporate feedback from Trezor CEO Matej Zak.
South Korea’s largest crypto change, Upbit, quickly froze deposits and withdrawals on Thursday after detecting about $36 million in unauthorized outflows from a Solana-network sizzling pockets.
In an announcement, the change mentioned the suspicious transfers had been flagged round 4:42 am native time (7:42 pm UTC), prompting a shutdown of switch providers and a full safety overview of its supported crypto belongings.
Upbit confirmed that the compromise was remoted to its sizzling pockets, highlighting that cold-wallet reserves remained untouched. The change moved its remaining belongings into chilly storage and initiated onchain freezing makes an attempt.
The incident put recent scrutiny on Dunamu, which had simply introduced a $10 billion acquisition take care of fintech big Naver. It additionally revived reminiscences of Upbit’s 2019 safety breach, when the change misplaced almost $50 million in an assault orchestrated by the North Korean hacking group, Lazarus.
🚨 ALERT: Upbit suspends deposits and withdrawals after $38.5M irregular outflow on Solana community, reporting the belongings had been transferred to unknown pockets on Nov 27.
Upbit confirms it would cowl all losses. pic.twitter.com/28Eu61s1Tf
— Cointelegraph (@Cointelegraph) November 27, 2025
Upbit to reimburse consumer funds misplaced within the breach
Upbit mentioned it had suspended deposits and withdrawals throughout the platform as a precaution, a measure that may stay in place till it completes its safety overview. The freeze will not be restricted to Solana-based belongings, as the corporate works to safe its techniques and assess remaining dangers.
Buying and selling on the platform continues to function usually, permitting customers to purchase and promote belongings inside the change. Nevertheless, customers can’t transfer funds on or off the platform whereas the overview is ongoing.
The corporate additionally assured customers that any balances misplaced on account of the safety incident will likely be absolutely coated by its reserves, emphasizing that no buyer belongings will likely be misplaced because of the breach.
Upbit mentioned no motion is required for purchasers to get well their funds. Nevertheless, the change requested customers to remain affected person because it conducts a platform-wide audit and works with regulators to finalize the investigation.
In line with native studies, monetary authorities have began on-site inspections to raised perceive the incident.
Whereas the change assured clients that their funds can be returned, it has not revealed a transparent timeline.
Cointelegraph reached out to Upbit and Dunamu for feedback, however had not acquired a response by publication.
Crypto exchanges are “large honeypots” for hackers
On the TBD convention, Trezor CEO Matej Zak acknowledged that safety points surrounding crypto exchanges is not going to be resolved anytime quickly.
“Exchanges are clearly large honeypots for hackers,” Zak mentioned. “And since safety is a transferring goal, this downside will not be going away.”
Zak pointed to the rise in crypto belongings misplaced to safety incidents in 2025. On July 1, blockchain safety firm CertiK reported that about $2.47 billion had been stolen in hacks, scams and exploits within the first half of 2025.
He additionally pointed to the $1.5 billion Bybit hack in March, which is among the largest crypto hacks recorded.
Associated: South Korea stablecoin framework stalls as regulators break up over banks’ position
Safety incident hits amid Dunamu’s world growth plans
The incident comes amid an essential milestone for Upbit, as its guardian firm, Dunamu, has struck a $10.3 billion acquisition take care of South Korean search engine platform Naver.
In line with a Wednesday submitting, Naver Monetary will purchase Upbit operator Dunamu in a stock-swap deal valued at 15.1 trillion received (about $10.3 billion). Naver will difficulty 87.5 million new shares to Dunamu shareholders and can subsequently make Dunamu an entirely owned subsidiary.
Along with its acquisition plans, Dunamu additionally plans to launch an preliminary public providing (IPO) in america following the completion of its merger.
Other than the acquisition and IPO plans, Naver and Dunamu additionally reportedly plan to speculate almost $7 billion over the subsequent 5 years to develop an ecosystem for Web3 applied sciences and synthetic intelligence.
Journal: 2026 is the yr of pragmatic privateness in crypto: Canton, Zcash and extra
