PANews|11月 28, 2025 05:27
[Analysis: Upbit May Face Long-Term Infiltration by Advanced Persistent Threat Organizations]
Security company GoPlus analyzed that the recent attack on Upbit has raised several serious issues: the hot wallet leak points to vulnerabilities in key management and security risks within the internal network. The cold wallet remains secure. Key points of concern in this incident include:
1. 'Anniversary Attack' — The attack date coincides with the same day as the $50 million hacking incident in 2019 (6 years ago).
2. Strategic timing — The attack was launched just hours after the major merger announcement between Dunamu and Naver.
3. Typical characteristics of the Lazarus Group — The speed, methods, and symbolic significance of the attack.
4. Sophisticated money laundering techniques — Routed through multiple DEXs, potentially posing regulatory evasion risks (2,200 SOL tokens transferred to Binance).
All signs indicate that the platform may be subject to long-term infiltration by Advanced Persistent Threat (APT) organizations.
Earlier reports revealed that Upbit disclosed approximately 54 billion KRW worth of Solana network assets were stolen; South Korean authorities suspect North Korean hacker group Lazarus as the mastermind behind this attack.
Share To
HotFlash
APP
X
Telegram
CopyLink