South Korea’s largest crypto exchange, Upbit, disclosed a security incident involving assets on the Solana network on Thursday, reporting losses of roughly $36 million as the platform moved to contain the breach.
The exchange said it detected irregular withdrawals linked to a compromised hot-wallet address, prompting it to halt some services while investigators traced the flow of funds.
“At around 04:42 on 2025-11-27, Upbit confirmed that a portion of Solana network assets (approximately 54 billion KRW worth) had been transferred to a wallet address not designated internally (an unknown external wallet),” a rough translation of Dunamu CEO Oh Kyung-seok’s public notice reads.
Affected assets include meme coins such as Bonk (BONK), Moodeng (MOODENG), Official Trump (TRUMP), and decentralized finance tokens such as Sonic SVM (SONIC), Access Protocol (ACS), Jito (JTO), Solana (SOL), and Raydium (RAY), among other tokens such as Pudgy Penguin (PENGU). The list also includes Circle’s USD Coin (USDC).
“The scale of the loss caused by the abnormal withdrawals was identified internally immediately upon confirmation,” Oh said, adding that Upbit will “fully compensate the entire amount with its own assets so that no impact occurs to members’ assets.”
Upbit said it has initiated an emergency security review of all related networks and wallet systems immediately after detecting the irregular transfers.
Per Oh’s notice, the exchange moved all remaining assets into cold storage to prevent additional abnormal withdrawals, and it is coordinating on-chain freeze attempts with relevant projects after successfully freezing a portion of Solayer (LAYER).
Upbit added that broader deposit and withdrawal services will resume only after systemwide security checks are completed.
The suspected hack comes as Dunamu, Upbit’s parent company, has been navigating one of its most consequential corporate transitions in years, with the firm set to be absorbed into Naver Financial under a $10.3 billion stock-swap agreement.
Decrypt reached out to Dunamu for comment. This is a developing story.
免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到support@aicoin.com，本平台相关工作人员将会进行核查。
