en
Back to the list

South Korean Crypto Giant Upbit Says $37 Million Was Stolen In Solana Network Ha ...

source-logo  cryptoknowmics.com 27 November 2025 06:36, UTC
image

Upbit, one of the largest and most known cryptocurrency exchanges in South Korea, has experienced and acknowledged the data breach and theft of around $37 million (approximately 54 billion KRW). The lost funds comprise the company's Solana (SOL)-linked hot wallets indicating data security loss for the centralized hot wallet feature of the mobile application due to the loss of user mobile funds. [embed]https://twitter.com/PeckShieldAlert/status/1993891142484808060[/embed] This incident shows a failure of security controls in the hot wallets data threat of even the most regulatory compliant crypto exchanges. As a protective measure, the exchange stopped all open user wallets deposit and withdraw activities, and also user funds remaining in closed wallets, and initiated an external investigation to uncover the data breach remaining threats.

Unauthorized Transfer Details

On incident of breach there was an internal Upbit Solana network tableau of hot wallets active data breach a consolidation of funds in one of the lost wallets to a blacklisted wallet. While there is a clarification of the nature of lost tokens, a data attacking system indicating probable there was an attempt to liquidate the pool to security to avoid detection an instant. The level of trade sophistication to actions available beyond the control of the exchange and internal security processes was rapidly attacked. Upbit has noted that any funds that have been lost due to this will be compensated by the internal insurance. Upholding this customer loss reimbursement is vital to earning customer trust given the gravity of the security situation. However, the internal insurance has been logged as the reason for the escape of security gaps to be treated as a customer loss for as long as the dried up flow of security gaps remains unchallenged.

Implications for Centralised Exchanges and Solana

The complexity of the attack is harnessed by the fact that the Solana blockchain is one of the fastest. Although it is evident that the attack had a focus on the blockchain’s custodial wallet structure, the attack now places a spotlight on the practices of Centralised Exchanges (CEX) and their security towards third-party blockchains. For the crypto community, this attack now places into focus the issue of unsafely storing large amounts of a crypto asset in hot wallets or custodial wallets. With the increased valuation of crypto assets, the secure storing of assets in a blockchain remains a moving goal, however, it is evident that the security measures of exchanges will come under increased scrutiny in order to avoid large security compromises.

cryptoknowmics.com