Upbit, South Korea’s largest crypto exchange, experienced a security breach resulting in the theft of $30-$36 million in Solana-based tokens on November 27, 2025, highlighting system vulnerabilities.
The hack underscores rising crypto security threats, emphasizing the need for robust wallet protections as Upbit compensates users and freezes $8.2 million in stolen assets, impacting the crypto market.
Upbit Suffers $30-$36 Million Wallet Breach
South Korean crypto exchange Upbit experienced a significant breach resulting in $30-$36 million in stolen assets. The hack was linked to a wallet system vulnerability. Upbit’s CEO Oh Kyung-seok has confirmed that the vulnerability has been resolved.
The breach involved the hacking group Lazarus, known for previous attacks on Upbit. Dunamu, Upbit’s parent company, is currently being acquired by internet company Naver. This occurs amid significant corporate and security changes within Upbit.
Full Compensation Offered Post-Hack
Upbit ensured full compensation for all affected users, covering losses from its reserves. This approach mitigated immediate customer impact and helped maintain trust despite the breach, displaying a professional response under challenging circumstances.
Continued scrutiny of crypto exchange security is anticipated, highlighting the importance of robust wallet key management. Historical trends show potential growth in regulated security measures following such incidents, promoting enhanced safety for assets. Upbit made the following statement:
Oh Kyung-seok, CEO of Dunamu/Upbit, – “We analyzed numerous Upbit wallet transactions… and discovered a security vulnerability that allowed us to deduce private keys… We addressed this vulnerability. All affected customers have been fully compensated”
Lazarus Repeatedly Targets Upbit, Stakes High
The recent hack shares similarities with a 2019 incident, where Lazarus targeted Upbit, compromising private keys and leading to a loss of approximately 58 billion won in Ethereum. These repeated patterns reflect ongoing vulnerabilities in exchange security frameworks.
Expert analysis suggests the importance of regular audits and multi-layered defenses. Ongoing collaboration with government authorities may enhance regulatory frameworks, addressing cross-border theft risks posed by groups like Lazarus. Insights from the recent indictment for a $230 million cryptocurrency scam highlight the intricate challenges faced by regulatory bodies globally.
| Disclaimer: This website provides information only and is not financial advice. Cryptocurrency investments are risky. We do not guarantee accuracy and are not liable for losses. Conduct your own research before investing. |
