{"id":8605,"date":"2025-11-29T19:13:08","date_gmt":"2025-11-29T19:13:08","guid":{"rendered":"https:\/\/coinsvalue.net\/blog\/upbit-30-million-hack-update-authorities-link-breach-to-north-korean-hackers\/"},"modified":"2025-11-29T19:13:08","modified_gmt":"2025-11-29T19:13:08","slug":"upbit-30-million-hack-update-authorities-link-breach-to-north-korean-hackers","status":"publish","type":"post","link":"https:\/\/coinsvalue.net\/blog\/upbit-30-million-hack-update-authorities-link-breach-to-north-korean-hackers\/","title":{"rendered":"Upbit $30 Million Hack Update: Authorities Link Breach To North Korean Hackers"},"content":{"rendered":"<p>South Korea&#8217;s largest cryptocurrency exchange, Upbit, is currently under scrutiny by regulators following a significant hack that led to the unauthorized withdrawal of approximately $36.9 million in assets on the Solana (SOL) network. The breach impacted over 20 different tokens and has prompted Upbit to freeze assets on its platform while an investigation unfolds.<\/p>\n<h2>Lazarus Group Tied To Upbit Hack<\/h2>\n<p>Authorities are now investigating the possibility of North Korean involvement in the cyber attack. Reports <a href=\"https:\/\/www.reuters.com\/world\/asia-pacific\/south-korea-suspects-north-korea-behind-hack-crypto-exchange-upbit-yonhap-2025-11-28\/\" target=\"_blank\" rel=\"noopener nofollow\">suggest <\/a>that a group affiliated with North Korea\u2019s intelligence agency, the notorious Lazarus Group, may have orchestrated the hack, which Upbit has described as an &#8220;abnormal withdrawal.&#8221;\u00a0<\/p>\n<p>This group has been consistently linked to several high-profile crypto heists in recent years, and the US Federal Bureau of Investigation (FBI) has identified North Korean cyber operations as one of the most sophisticated and persistent threats.<\/p>\n<p>The recent attack coincidentally occurred just days before the sixth anniversary of a previous major breach, in which Upbit lost 342,000 Ethereum (ETH) to North Korean hackers.\u00a0<\/p>\n<p>According to an unnamed government official, this latest hack bears similarities to a 2019 incident in which approximately 58 billion won in cryptocurrencies was stolen, also attributed to the Lazarus Group.<\/p>\n<p>In response to the attack, the South Korean National Police Agency has launched an investigation into the matter, although officials have not provided further comments on the case. Upbit&#8217;s operator, Dunamu, confirmed that an in-depth investigation into the cause and extent of the asset outflow is currently underway.<\/p>\n<h2>Crypto Exchange Moves Funds To Cold Storage<\/h2>\n<p>The cryptocurrency exchange\u2019s CEO Oh Kyung-seok stated that as soon as abnormal withdrawal activity was detected, Upbit promptly suspended all deposit and withdrawal services.\u00a0<\/p>\n<p>&#8220;We are conducting a comprehensive inspection, prioritizing the protection of member assets,&#8221; he said in a notice to users. Following the discovery of the unauthorized transactions, Upbit has taken steps to freeze the affected funds wherever possible.<\/p>\n<p>To prevent any further unauthorized transfers, the exchange has shifted all remaining assets to cold storage, ensuring \u201ca secure environment for funds.\u201d\u00a0<\/p>\n<p>Upbit is also said to be working with relevant project teams to freeze assets on-chain, having already blocked a portion of the stolen funds related to the cryptocurrency Solayer (LAYER). The exchange has indicated that deposits and withdrawals will only resume once full security checks are completed.<\/p>\n<p>Dunamu has vowed to reimburse customers for any losses with business funds as part of its commitment to its users. It remains to be seen what additional information the country&#8217;s authorities will release in the coming days, as well as potential refund deadlines for affected individuals.\u00a0\u00a0<\/p>\n<p><img decoding=\"async\" loading=\"lazy\" class=\"size-large\" src=\"https:\/\/www.tradingview.com\/x\/iZmuoLd3\/\" alt=\"Upbit\" width=\"1814\" height=\"928\" \/><\/p>\n<p>Featured image from DALL-E, chart from TradingView.com\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>South Korea&#8217;s largest cryptocurrency exchange, Upbit, is currently under scrutiny by regulators following a significant hack that led to the unauthorized withdrawal of approximately $36.9 million in assets on the Solana (SOL) network. The breach impacted over 20 different tokens and has prompted Upbit to freeze assets on its platform while an investigation unfolds. Lazarus&hellip;<\/p>\n","protected":false},"author":1,"featured_media":8606,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[25],"tags":[56,62,36,4118,85,43,95,33,2926,1891,903,4119,4120],"class_list":["post-8605","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrency-market-news","tag-bitcoin","tag-btcusdt","tag-crypto","tag-crypto-exchange-upbit","tag-crypto-market","tag-crypto-news","tag-cryptocurrency","tag-cryptocurrency-market-news","tag-lazarus-group","tag-north-korean-hackers","tag-upbit","tag-upbit-hack","tag-upbit-news"],"_links":{"self":[{"href":"https:\/\/coinsvalue.net\/blog\/wp-json\/wp\/v2\/posts\/8605","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinsvalue.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinsvalue.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinsvalue.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/coinsvalue.net\/blog\/wp-json\/wp\/v2\/comments?post=8605"}],"version-history":[{"count":0,"href":"https:\/\/coinsvalue.net\/blog\/wp-json\/wp\/v2\/posts\/8605\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinsvalue.net\/blog\/wp-json\/wp\/v2\/media\/8606"}],"wp:attachment":[{"href":"https:\/\/coinsvalue.net\/blog\/wp-json\/wp\/v2\/media?parent=8605"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinsvalue.net\/blog\/wp-json\/wp\/v2\/categories?post=8605"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinsvalue.net\/blog\/wp-json\/wp\/v2\/tags?post=8605"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}