{"id":91471,"date":"2025-11-27T09:51:54","date_gmt":"2025-11-27T06:51:54","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=91471"},"modified":"2025-11-27T09:55:21","modified_gmt":"2025-11-27T06:55:21","slug":"hackers-steal-37-million-from-south-korean-exchange-upbit","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/hackers-steal-37-million-from-south-korean-exchange-upbit\/","title":{"rendered":"Hackers Steal $37 Million from South Korean Exchange Upbit"},"content":{"rendered":"<p>On November 27, South Korea&#8217;s largest bitcoin exchange, Upbit, <a href=\"https:\/\/upbit.com\/service_center\/notice?id=5800&#038;view=share\">suspended<\/a> withdrawals following an attack in which hackers stole assets worth $36.8 million.<\/p>\n<p>The incident occurred on the <a href=\"https:\/\/forklog.com\/en\/news\/what-is-solana-sol\">Solana<\/a> network. Around 4 a.m. local time, some tokens were transferred to an unknown external wallet.<\/p>\n<p>The affected assets include: SOL, 2Z, ACS, BONK, DOOD, DRIFT, HUMA, IO, JTO, JUP, LAYER, ME, MEW, MOODENG, ORCA, PENGU, PYTH, RAY, RENDER, SONIC, SOON, TRUMP, <a href=\"https:\/\/forklog.com\/en\/news\/what-is-the-usdc-stablecoin\">USDC<\/a>, and W.<\/p>\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"793\" src=\"https:\/\/forklog.com\/wp-content\/uploads\/img-991d022759408317-10618952092904470-1024x793.png\" alt=\"image\" class=\"wp-image-270563\" srcset=\"https:\/\/forklog.com\/wp-content\/uploads\/img-991d022759408317-10618952092904470-1024x793.png 1024w, https:\/\/forklog.com\/wp-content\/uploads\/img-991d022759408317-10618952092904470-300x232.png 300w, https:\/\/forklog.com\/wp-content\/uploads\/img-991d022759408317-10618952092904470-768x595.png 768w, https:\/\/forklog.com\/wp-content\/uploads\/img-991d022759408317-10618952092904470-1536x1190.png 1536w, https:\/\/forklog.com\/wp-content\/uploads\/img-991d022759408317-10618952092904470.png 1650w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Source: <a href=\"https:\/\/x.com\/lookonchain\/status\/1993904734546300942\">X\/Lookonchain<\/a>.<\/figcaption><\/figure>\n<p>Upbit moved all tokens to secure cold wallets. They managed to freeze some of the stolen assets \u2014 LAYER tokens worth $8.18 million.<\/p>\n<p>The exchange stated it is working with blockchain security teams and law enforcement to investigate the incident. Representatives of the platform emphasized that users will receive full compensation for losses from the company&#8217;s reserves.<\/p>\n<p>Details of the attack have not yet been disclosed.<\/p>\n<h2 class=\"wp-block-heading\">Merger<\/h2>\n<p>On November 26, South Korea&#8217;s leading IT conglomerate, Naver Financial, <a href=\"https:\/\/dart.fss.or.kr\/dsaf001\/main.do?rcpNo=20251126800699&#038;\">announced<\/a> the acquisition of Dunamu, the operator of Upbit. The deal was valued at $10.29 billion. Following the merger, both companies will maintain their independence and continue to operate within their current business areas.<\/p>\n<p>According to <a href=\"https:\/\/www.chosun.com\/economy\/tech_it\/2025\/11\/27\/WSCII7AX5BGBZPVZOGBMG5RA2M\/?utm_source=naver&#038;utm_medium=referral&#038;utm_campaign=naver-news\">sources<\/a>, the exchange is preparing for an <span data-descr=\"initial public offering\" class=\"old_tooltip\">IPO<\/span> in light of the event.<\/p>\n<p>Shareholders of Dunamu will be able to exchange their shares for Naver Financial&#8217;s at an agreed rate of 1:3.3, after which Dunamu will come under Naver&#8217;s control.<\/p>\n<p>Dunamu Chairman Song Chi-hyung and Vice Chairman Kim Hyun-nen will become the largest stakeholders in the merged entity, holding a combined 30% stake.<\/p>\n<p>The CEO of the exchange operator, Oh Kyung-sok, <a href=\"https:\/\/www.blockmedia.co.kr\/archives\/1011762\">stated<\/a> that the firms will work on developing their own <a href=\"https:\/\/forklog.com\/en\/news\/what-are-stablecoins\">stablecoin<\/a>, pegged to the South Korean won. Earlier, local media <a href=\"https:\/\/n.news.naver.com\/article\/011\/0004559897?sid=101\">reported<\/a> that in December, Naver will launch a wallet for &#8220;stablecoins&#8221; as part of a pilot project in Busan.<\/p>\n<p>It was also <a href=\"https:\/\/www.chosun.com\/english\/industry-en\/2025\/11\/27\/6AURKFE7R5BO5ASJWF2WKRHU7I\/\">reported<\/a> that over the next five years, Naver and Dunamu will invest about $6.8 billion in creating financial infrastructure based on artificial intelligence and blockchain.<\/p>\n<p>Back in November last year, South Korean authorities <a href=\"https:\/\/forklog.com\/en\/news\/south-korean-authorities-uncover-up-to-600000-kyc-violations-at-upbit\">discovered<\/a> up to 600,000 <span data-descr=\"know your customer\" class=\"old_tooltip\">KYC<\/span> violations at Upbit.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>On November 27, South Korea&#8217;s largest bitcoin exchange, Upbit, suspended withdrawals following an attack in which hackers stole assets worth $36.8 million.<\/p>\n","protected":false},"author":1,"featured_media":91472,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"Hackers stole $37 million from Upbit, South Korea's largest bitcoin exchange.","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1246,974,1503],"class_list":["post-91471","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-scammers","tag-south-korea","tag-upbit"],"aioseo_notices":[],"amp_enabled":true,"views":"248","promo_type":"1","layout_type":"1","short_excerpt":"Hackers stole $37 million from Upbit, South Korea's largest bitcoin exchange.","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/91471","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=91471"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/91471\/revisions"}],"predecessor-version":[{"id":91473,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/91471\/revisions\/91473"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/91472"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=91471"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=91471"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=91471"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}