en
Back to the list

South Korean Crypto Exchange Faces Major Cybersecurity Threat

source-logo  en.bitcoinhaber.net 28 November 2025 11:14, UTC
image

In a significant blow to one of South Korea’s largest cryptocurrency exchanges, Upbit, an unexpected cybersecurity breach led to a substantial financial loss. Hackers siphoned approximately 5.9 billion won, roughly equivalent to $4 million, from the exchange’s assets. Despite the attack, Upbit was able to safeguard its user base by utilizing its reserves to cover a total deficit of 38.6 billion won. Prompt measures were taken to freeze 2.3 billion won in compromised funds, thanks to diligent blockchain tracking. Investigators have turned their attention to the infamous Lazarus group, known for its global cyber crimes, as potential culprits.

Contents
Is Upbit Equipped to Handle such Breaches?Could the Lazarus Group Be the Perpetrator?

Is Upbit Equipped to Handle such Breaches?

Once Upbit detected the irregular activity resulting in a hefty sum of lost assets, the exchange promptly halted its deposit and withdrawal functions. Dunamu CEO, Oh Kyung-seok, assured stakeholders by proclaiming, “We covered all losses with our own funds.” In response, Upbit engaged cybersecurity teams swiftly to cut off both internal and external connections to limit further damage.

Collaborating with blockchain analytics firms, the exchange successfully pinpointed hacker addresses and secured 2.3 billion won in assets. This immediate action aims to bolster the trust and standing of the platform. Meanwhile, the attack has prompted South Korean regulators to reassess their cybersecurity threat levels amid rising concerns.

Could the Lazarus Group Be the Perpetrator?

Investigating authorities strongly suspect the involvement of the Lazarus group due to the similarity in hacking techniques employed during the attack. These techniques, especially within the Solana ecosystem, mirror past operations linked to the notorious group. Current assessments indicate the group’s interest in exploiting vulnerabilities across fintech platforms worldwide.

This incident is not Upbit’s first encounter with cyber threats. Since an earlier major breach in 2019, the company has maintained stringent security measures. Even so, this attack reiterates the ongoing and evolving risks cryptocurrency exchanges face. Experts emphasize that as decentralized finance grows, the demand for robust security measures becomes crucial, not just beneficial.

The breach highlights glaring cybersecurity weaknesses within the cryptocurrency sector. It also showcases Upbit’s efforts in ensuring user protection via quick response and monetary compensation. Regulatory bodies are likely to intensify surveillance and impose stricter rules to forestall such breaches in the future.

– The attack resulted in Upbit losing a total of 44.5 billion won in assets.
– A quick response helped freeze 2.3 billion won in assets linked to malefactors.
– Upbit’s coverage of 38.6 billion won in losses upheld its commitment to user safety.
– Cybersecurity reevaluations by South Korean authorities signal industry-wide implications.

With security undermined again, cryptocurrency stakeholders are reminded of the persistent threat of cyberattacks. The incident serves as a stark warning and a call to action for enhanced protective measures within the crypto domain. As investigations continue, industry players and regulators must work together to ensure the safety and sustainability of digital financial ecosystems.

en.bitcoinhaber.net