South Korea’s largest crypto exchange, Upbit, disclosed a security incident involving assets on the Solana network on Thursday, reporting losses of roughly $36 million as the platform moved to contain the breach.
The exchange said it detected irregular withdrawals linked to a compromised hot-wallet address, prompting it to halt some services while investigators traced the flow of funds.
“At around 04:42 on 2025-11-27, Upbit confirmed that a portion of Solana network assets (approximately 54 billion KRW worth) had been transferred to a wallet address not designated internally (an unknown external wallet),” a rough translation of Dunamu CEO Oh Kyung-seok’s public notice reads.
Affected assets include meme coins such as Bonk (BONK), Moodeng (MOODENG), Official Trump (TRUMP), and decentralized finance tokens such as Sonic SVM (SONIC), Access Protocol (ACS), Jito (JTO), Solana (SOL), and Raydium (RAY), among other tokens such as Pudgy Penguin (PENGU). The list also includes Circle’s USD Coin (USDC).
“The scale of the loss caused by the abnormal withdrawals was identified internally immediately upon confirmation,” Oh said, adding that Upbit will “fully compensate the entire amount with its own assets so that no impact occurs to members’ assets.”
Upbit said it has initiated an emergency security review of all related networks and wallet systems immediately after detecting the irregular transfers.
Per Oh’s notice, the exchange moved all remaining assets into cold storage to prevent additional abnormal withdrawals, and it is coordinating on-chain freeze attempts with relevant projects after successfully freezing a portion of Solayer (LAYER).
Upbit added that broader deposit and withdrawal services will resume only after systemwide security checks are completed.
The suspected hack comes as Dunamu, Upbit’s parent company, has been navigating one of its most consequential corporate transitions in years, with the firm set to be absorbed into Naver Financial under a $10.3 billion stock-swap agreement.
Decrypt reached out to Dunamu for comment. This is a developing story.
Start every day with the top news stories right now, plus original features, a podcast, videos and more.
Read the full article here
Verify the accuracy of this article using AI-powered analysis and real-time sources.
Enter your email to receive detailed fact-checking analysis
You've used your 5 free reports. Sign up for unlimited access!
Already have an account? Sign in here
The FSNN News Room is the voice of our in-house journalists, editors, and researchers. We deliver timely, unbiased reporting at the crossroads of finance, cryptocurrency, and global politics, providing clear, fact-driven analysis free from agendas.
We and our selected partners wish to use cookies to collect information about you for functional purposes and statistical marketing. You may not give us your consent for certain purposes by selecting an option and you can withdraw your consent at any time via the cookie icon.
Cookies are small text that can be used by websites to make the user experience more efficient. The law states that we may store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we need your permission. This site uses various types of cookies. Some cookies are placed by third party services that appear on our pages.
Freedom Index