{"investigation":{"slug":"upbit","entity_name":"Upbit","trust_score":58,"severity_base":null,"score_modifier":16,"confidence":1,"status":"published","content_type":"investigation","summary":"Upbit is South Korea's largest cryptocurrency exchange by trading volume, operated by Dunamu and commanding approximately 70–80% of the domestic market. The exchange has suffered two significant security breaches — a $49M ETH theft in 2019 and a $36M Solana breach in November 2025, both attributed to North Korea's Lazarus Group — and has faced substantial regulatory sanctions including a $25M AML/KYC fine and a court-contested three-month partial business suspension. While Upbit has consistently reimbursed users from its own assets after security incidents and retains official VASP registration, its pattern of compliance failures, market dominance concerns, and repeated hacks present elevated risk.","sections":[{"content":"Upbit is a South Korean cryptocurrency exchange launched on October 24, 2017, and operated by Dunamu Inc., one of South Korea's highest-valued tech startups. The platform launched with a partnership with American exchange Bittrex and quickly grew to become the dominant force in South Korean crypto trading. Within two months of launch, it briefly ranked as the world's highest-volume exchange. As of 2024–2026, Upbit holds approximately 70–80% of South Korea's domestic crypto market share and serves over 8 million registered users.\n\nUpbit offers trading across approximately 180 cryptocurrencies with over 300 trading pairs and charges a 0.05% fee on KRW-denominated pairs. The exchange does not offer margin or leveraged trading products. It is partnered with K-Bank to provide real-name, verified bank accounts for Korean users — a regulatory requirement under South Korean anti-money laundering law. Upbit's parent company Dunamu is backed by Kakao, the South Korean internet conglomerate.\n\nIn December 2018, Upbit became the first cryptocurrency exchange in the world to receive ISMS certification from the Korea Internet and Security Agency, as well as ISO 27001, ISO 27017, and ISO 27018 certifications. The exchange has expanded internationally, operating services in Singapore, Indonesia, and Thailand. Dunamu was acquired by a new parent in late 2025, with the acquisition closing on the same date as the second major security breach.","heading":"Background","sources":[{"url":"https://en.wikipedia.org/wiki/Upbit","name":"","type":"other","credibility":3},{"url":"https://coinbureau.com/review/upbit-review","name":"","type":"other","credibility":3},{"url":"https://www.bitget.com/amp/academy/upbit-korea-vs-globa","name":"","type":"other","credibility":3}],"severity":"medium"},{"content":"On November 27, 2019, Upbit's Ethereum hot wallet was drained of 342,000 ETH — worth approximately $49 million at the time — in a single unauthorized transaction at 1:06 p.m. KST. The funds were transferred from Upbit's hot wallet to an unknown external wallet address. Upbit immediately froze all cryptocurrency deposits and withdrawals and transferred remaining assets from hot wallets to cold storage.\n\nUpbit's CEO stated that no investor assets were lost and that the company would cover the missing Ethereum from its own corporate reserves, which it subsequently did. Following the theft, attackers began moving the stolen ETH across approximately 50,000 wallets and 100,000 transactions over the following weeks in an attempt to launder the funds. On-chain analysis estimated that approximately 65,000–75,000 of the hacked ETH was moved to various exchange entities within three weeks of the theft.\n\nSouth Korean police and cybersecurity investigators later attributed the hack to North Korea's Lazarus Group, controlled by North Korea's Reconnaissance General Bureau. The attack method allegedly involved compromising administrator accounts or impersonating administrators to authorize the transfers rather than directly breaching servers. The Lazarus Group attribution became a reference point for later assessments of state-sponsored crypto theft operations.\n\nThis event made Upbit the seventh major crypto exchange to be hacked in 2019, a year marked by widespread exchange security failures.","heading":"The 2019 Hack","sources":[{"url":"https://www.coindesk.com/markets/2019/11/27/upbit-is-the-seventh-major-crypto-exchange-hack-of-2019","name":"","type":"other","credibility":3},{"url":"https://www.bankinfosecurity.com/blogs/hackers-steal-49-million-in-ethereum-from-upbit-exchange-p-2825","name":"","type":"other","credibility":3},{"url":"https://bitquery.io/blog/upbit-hack-crypto-money-laundering","name":"","type":"other","credibility":3},{"url":"https://www.theblock.co/post/380743/lazarus-group-suspected-upbit-hack","name":"","type":"other","credibility":3}],"severity":"medium"},{"content":"On November 27, 2025 — exactly six years after the 2019 incident, and on the same day Dunamu's acquisition closed — Upbit suffered a second significant security breach. Attackers stole approximately $36 million in Solana-ecosystem assets, including SOL, USDC, BONK, JUP, RAY, RENDER, ORCA, and PYTH tokens, by exploiting an alleged flaw in Upbit's digital signature algorithm.\n\nSecurity researchers assessed that the attack required social engineering for information gathering combined with high technical proficiency and mathematical knowledge to exploit the signing infrastructure vulnerability. The breach gave attackers control over a hot wallet, which was then drained. South Korean authorities again attributed the attack to North Korea's Lazarus Group, noting that the timing — on the sixth anniversary of the prior hack and on the acquisition closing date — was consistent with the group's pattern of targeting significant dates.\n\nCEO Oh Kyoung-suk halted all deposits and withdrawals as a precautionary measure and announced Upbit would cover all losses from its own assets. South Korea subsequently initiated legislative discussions to impose bank-level, no-fault liability on cryptocurrency exchanges for losses arising from hacks or system failures.","heading":"The 2025 Hack","sources":[{"url":"https://www.coindesk.com/markets/2025/11/28/south-korea-suspects-north-korea-linked-lazarus-behind-usd36m-upbit-hack","name":"","type":"other","credibility":3},{"url":"https://www.halborn.com/blog/post/explained-the-upbit-hack-november-2025","name":"","type":"other","credibility":3},{"url":"https://www.ccn.com/education/crypto/upbit-2025-hack-36-million-solana-assets-stolen/","name":"","type":"other","credibility":3},{"url":"https://www.thecoinrepublic.com/2025/12/07/south-korea-to-impose-bank-level-liability-on-crypto-exchanges-after-upbit-hack/","name":"","type":"other","credibility":3}],"severity":"medium"},{"content":"Upbit's regulatory history is marked by both formal compliance milestones and significant enforcement actions.\n\n**2018 Fraud Indictment (Acquitted):** In March 2018, prosecutors raided Upbit's Gangnam-gu headquarters. In December 2018, three senior executives, including founder Song Chi-Hyung, were indicted on charges of fraud and market manipulation, accused of using a fake corporate account to place bogus orders worth 254 trillion won ($226B) to inflate volume and of selling 11,550 BTC through alleged manipulative practices. The Seoul Southern District Court ultimately acquitted all executives for lack of evidence.\n\n**VASP Registration (2021–2023):** Under the revised Act on Reporting and Using Specified Financial Transaction Information, which took effect September 24, 2021, all crypto exchanges in South Korea were required to obtain ISMS certification, register with the Financial Intelligence Unit (FIU), and secure real-name bank account partnerships. Upbit (via Dunamu) was one of only five exchanges to meet these requirements. The FIU renewed Dunamu's registration on December 23, 2023, after a 16-month review process that concluded alongside a major enforcement action.\n\n**$25M AML/KYC Fine and Suspension (2024–2025):** On January 9, 2025, the FIU issued a preliminary notice of sanctions against Dunamu, alleging approximately 5.3 million instances of inadequate customer due diligence and 15 instances of failure to report suspicious transactions. The FIU also alleged that Upbit conducted transactions with unregistered overseas virtual asset service providers in violation of local regulations. On February 25, 2025, the FIU formalized sanctions: a fine of 35.2 billion won (approximately $25 million) and a three-month partial business suspension prohibiting Upbit from onboarding new customers, effective March 7 to June 6, 2025.\n\nDunamu filed for an injunction on February 28, 2025. On March 27, 2025, a Seoul court granted the injunction, temporarily allowing new user onboarding to continue. The Seoul Administrative Court ultimately overturned the suspension in full, finding that clear regulatory rules existed only for transactions above 1 million won (~$675) and that rules for smaller transfers were insufficiently specific to support enforcement. The $25M fine itself remained the subject of a potential appeal.\n\n**Market Monopoly Investigation (2024):** The Financial Services Commission launched an investigation into Upbit's market dominance, which reached approximately 80% of South Korean crypto trading volume by mid-2024. Concerns centered on systemic risk and Upbit's relationship with K-Bank, where Upbit customer deposits ($4 trillion KRW) constituted roughly 20% of K-Bank's total deposit base.","heading":"Regulatory History","sources":[{"url":"https://www.coindesk.com/markets/2018/12/21/executives-at-korean-crypto-exchange-upbit-indicted-for-fraud","name":"","type":"other","credibility":3},{"url":"https://bitcoinist.com/upbit-exchange-execs-cleared-of-fraud-charges-in-south-korea/","name":"","type":"other","credibility":3},{"url":"https://www.coindesk.com/policy/2025/11/25/upbit-considering-appeal-of-usd25m-fine-by-south-korea-regulator","name":"","type":"other","credibility":3},{"url":"https://cryptobriefing.com/upbit-sanctions-over-aml-kyc/","name":"","type":"other","credibility":3},{"url":"https://cointelegraph.com/news/south-korea-court-cancels-dunamu-upbit-suspension-fiu","name":"","type":"other","credibility":3},{"url":"https://cryptonews.com/news/south-korean-crypto-exchange-upbit-faces-monopoly-investigation/","name":"","type":"other","credibility":3},{"url":"https://cryptoslate.com/south-korea-investigates-upbit-over-market-dominance-concerns/","name":"","type":"other","credibility":3}],"severity":"medium"},{"content":"Upbit holds multiple internationally recognized security certifications. In December 2018, it became the first cryptocurrency exchange globally to achieve ISMS certification from the Korea Internet and Security Agency, alongside ISO 27001 (information security), ISO 27017 (cloud security), and ISO 27018 (cloud privacy) certifications.\n\nDespite these certifications, the exchange has suffered two significant hot wallet compromises — the 2019 ETH hack and the 2025 Solana breach — both resulting in tens of millions of dollars in losses and both attributed to North Korea's Lazarus Group. In the first half of 2023, the exchange reported approximately 160,000 hacking attempts, more than double the figure for the same period in 2021. In response, Upbit announced it was decentralizing operational hot wallets and expanding cold wallet storage to over 70% of held assets.\n\nThe 2025 breach identified a specific flaw in Upbit's digital signature algorithm, which security researchers flagged as a critical infrastructure vulnerability. The fact that this flaw was exploited six years after the 2019 incident, and after multiple security upgrades, raises questions about the thoroughness of the exchange's cryptographic security audits.\n\nIn South Korea, proposed legislation following the November 2025 breach would require exchanges to compensate users automatically for losses from hacks or system failures, with no-fault liability extending to the exchange regardless of negligence. As of May 2026 this legislation is in consultation.","heading":"Security Posture","sources":[{"url":"https://www.nasdaq.com/articles/upbit-shifts-to-cold-wallets-after-160k-hacking-attempts-in-first-half-of-2023","name":"","type":"other","credibility":3},{"url":"https://www.halborn.com/blog/post/explained-the-upbit-hack-november-2025","name":"","type":"other","credibility":3},{"url":"https://www.cylynx.io/blog/tracing-the-trail-of-the-upbit-hack/","name":"","type":"other","credibility":3}],"severity":"medium"},{"content":"Upbit has compensated users fully from its own corporate reserves after both the 2019 and 2025 security breaches. In 2019, the CEO stated on the day of the hack that investor assets were protected and that Upbit would cover losses from its balance sheet — a commitment it followed through on. The same policy was announced following the 2025 Solana breach.\n\nUnder South Korea's existing regulatory framework, exchanges are required to maintain real-name verified bank accounts for users (via the special reporting framework under the Act on Reporting and Using Specified Financial Transaction Information), and must comply with KYC and AML obligations overseen by the FIU. However, as of the time of the 2025 hack, current South Korean law capped fines at 5 billion won ($3.4 million) and offered no mandatory compensation framework, leaving victims dependent on voluntary exchange payouts.\n\nProposed legislation introduced for public consultation following the November 2025 breach would extend the Electronic Financial Transactions Act to cover virtual asset service providers and impose strict no-fault liability for hacks, system failures, and errors, requiring automatic reimbursement regardless of exchange fault — unless users acted with gross negligence.\n\nUsers outside South Korea accessing Upbit's global platforms (Singapore, Indonesia, Thailand) operate under different regulatory frameworks and may have limited recourse under South Korean consumer protection mechanisms. The exchange does not offer a formal public bug bounty program as of research date, though third-party review sources cite an active bounty program.","heading":"User Protections","sources":[{"url":"https://www.welivesecurity.com/2019/11/27/upbit-cryptocurrency-exchange-hack/","name":"","type":"other","credibility":3},{"url":"https://finance.yahoo.com/news/south-korea-pushes-no-fault-045833985.html","name":"","type":"other","credibility":3},{"url":"https://www.thecoinrepublic.com/2025/12/07/south-korea-to-impose-bank-level-liability-on-crypto-exchanges-after-upbit-hack/","name":"","type":"other","credibility":3}],"severity":"medium"},{"content":"Upbit presents an elevated risk profile for users — particularly international users — based on the following findings:\n\n**Repeated security breaches:** Two major hacks totaling over $85 million in crypto losses (2019: ~$49M ETH; 2025: ~$36M SOL-ecosystem assets), both attributed to North Korea's state-sponsored Lazarus Group. The recurrence of a major breach six years after the first, despite intervening security upgrades and certifications, indicates persistent exposure to sophisticated nation-state-level threat actors.\n\n**Regulatory enforcement:** The FIU's finding of 5.3 million KYC violations and 15 unreported suspicious transactions — the largest AML enforcement action in South Korean crypto history at the time — indicates systemic compliance failures at scale. While the associated suspension was overturned on a technicality (lack of clear rules for small transfers), the fine remained under consideration for appeal as of late 2025.\n\n**Market concentration risk:** Upbit's 70–80% domestic market share creates systemic risk for South Korea's retail crypto market. A prolonged outage, hack, or license revocation would affect the majority of Korean crypto users. Its deep integration with K-Bank (Upbit deposits = ~20% of K-Bank's total deposits) further concentrates financial risk across the banking and crypto sectors.\n\n**Positive factors:** Upbit is a registered VASP under South Korean law, holds multiple international security certifications, has consistently reimbursed users after security incidents from its own assets, and its founder-level fraud charges from 2018 were acquitted for lack of evidence. It maintains cold wallet storage for the majority of user assets.\n\n**Verdict:** Upbit is a regulated, operational exchange with genuine institutional standing in South Korea, but its repeated exposure to catastrophic hot wallet theft, material AML compliance failures at scale, and ongoing regulatory scrutiny over monopolistic practices collectively place it in a higher risk tier than comparable Tier 1 global exchanges. Users should be aware that regulatory or security events at Upbit could have outsized impact on the South Korean market as a whole.","heading":"Risk Assessment","sources":[{"url":"https://finance.yahoo.com/news/south-koreas-upbit-exchange-faces-123601295.html","name":"","type":"other","credibility":3},{"url":"https://www.financemagnates.com/cryptocurrency/south-koreas-crypto-exchange-upbit-faces-suspension-over-kyc-violations/","name":"","type":"other","credibility":3},{"url":"https://www.koreatimes.co.kr/www/biz/2024/10/602_384310.html","name":"","type":"other","credibility":3},{"url":"https://beincrypto.com/upbit-solana-hack-2025-loss/","name":"","type":"other","credibility":3}],"severity":"medium"}],"timeline":[{"date":"2017-10-24","event":"Upbit launches in South Korea, operated by Dunamu Inc., in partnership with Bittrex.","source":""},{"date":"2018-03","event":"South Korean prosecutors raid Upbit's Gangnam-gu headquarters, seizing hard disks and accounting books.","source":"","date_original":"2018-03-01"},{"date":"2018-12-21","event":"Three senior Upbit executives, including founder Song Chi-Hyung, are indicted for fraud and market manipulation involving alleged fake orders worth 254 trillion KRW.","source":""},{"date":"2018-12","event":"Upbit becomes the first cryptocurrency exchange globally to receive ISMS, ISO 27001, ISO 27017, and ISO 27018 certifications.","source":"","date_original":"2018-12-01"},{"date":"2019-11-27","event":"342,000 ETH (~$49M) stolen from Upbit's Ethereum hot wallet in a single transaction. Deposits and withdrawals halted. Upbit pledges to cover all losses.","source":""},{"date":"2021","event":"Seoul Southern District Court acquits Upbit executives of all fraud and market manipulation charges for lack of evidence.","source":"","date_original":"2021-01-01"},{"date":"2021-09-24","event":"South Korea's revised VASP reporting law takes effect. Upbit secures ISMS certification and K-Bank real-name account partnership, becoming one of five qualifying exchanges.","source":""},{"date":"2023-06","event":"Upbit reports approximately 160,000 hacking attempts in H1 2023, more than double H1 2021 figures. Exchange announces shift toward 70%+ cold wallet storage.","source":"","date_original":"2023-06-01"},{"date":"2023-12-23","event":"FIU renews Dunamu's VASP registration after a 16-month review process, coinciding with enforcement sanction of 35.2 billion KRW.","source":""},{"date":"2024-10","event":"South Korea's FSC launches investigation into Upbit's alleged monopolistic market dominance (~80% domestic share) and ties to K-Bank.","source":"","date_original":"2024-10-01"},{"date":"2025-01-09","event":"FIU issues preliminary sanctions notice against Dunamu, citing 5.3 million KYC violations and 15 unreported suspicious transactions.","source":""},{"date":"2025-02-25","event":"FIU formalizes a 35.2 billion KRW (~$25M) fine and three-month partial business suspension on Dunamu, effective March 7.","source":""},{"date":"2025-02-28","event":"Dunamu files a lawsuit and requests a court injunction to halt the suspension.","source":""},{"date":"2025-03-27","event":"Seoul court grants injunction, allowing Upbit to continue onboarding new users while the case proceeds.","source":""},{"date":"2025-11-27","event":"$36 million in Solana-ecosystem assets stolen from Upbit hot wallet on the sixth anniversary of the 2019 hack and on the day of Dunamu's acquisition closing. South Korea attributes attack to Lazarus Group.","source":""},{"date":"2025-12-07","event":"South Korea begins legislative consultation on imposing bank-level no-fault liability on crypto exchanges for security losses.","source":""},{"date":"2025-11-25","event":"Dunamu publicly considers appealing the $25M FIU fine, citing court precedent of overturned FIU enforcement actions.","source":""}],"sources_used":[{"url":"https://en.wikipedia.org/wiki/Upbit","name":"","type":"other","archive_url":"http://web.archive.org/web/20260819195611/https://en.wikipedia.org/wiki/Upbit","credibility":3,"archive_timestamp":"2026-08-19T19:56:11+00:00"},{"url":"https://coinbureau.com/review/upbit-review","name":"","type":"other","archive_url":"http://web.archive.org/web/20260313132305/https://coinbureau.com/review/upbit-review","credibility":3,"archive_timestamp":"2026-03-13T13:23:05+00:00"},{"url":"https://www.bitget.com/amp/academy/upbit-korea-vs-globa","name":"","type":"other","archive_url":null,"credibility":3,"archive_error":"error:not-found","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.coindesk.com/markets/2019/11/27/upbit-is-the-seventh-major-crypto-exchange-hack-of-2019","name":"","type":"other","archive_url":"http://web.archive.org/web/20251001133337/https://www.coindesk.com/markets/2019/11/27/upbit-is-the-seventh-major-crypto-exchange-hack-of-2019","credibility":3,"archive_timestamp":"2025-10-01T13:33:37+00:00"},{"url":"https://www.bankinfosecurity.com/blogs/hackers-steal-49-million-in-ethereum-from-upbit-exchange-p-2825","name":"","type":"other","archive_url":"http://web.archive.org/web/20260829120831/https://www.bankinfosecurity.com/blogs/hackers-steal-49-million-in-ethereum-from-upbit-exchange-p-2825","credibility":3,"archive_timestamp":"2026-08-29T12:08:31+00:00"},{"url":"https://bitquery.io/blog/upbit-hack-crypto-money-laundering","name":"","type":"other","archive_url":"http://web.archive.org/web/20260217105740/https://bitquery.io/blog/upbit-hack-crypto-money-laundering","credibility":3,"archive_timestamp":"2026-02-17T10:57:40+00:00"},{"url":"https://www.theblock.co/post/380743/lazarus-group-suspected-upbit-hack","name":"","type":"other","archive_url":"http://web.archive.org/web/20251207000924/https://www.theblock.co/post/380743/lazarus-group-suspected-upbit-hack","credibility":3,"archive_timestamp":"2025-12-07T00:09:24+00:00"},{"url":"https://www.coindesk.com/markets/2025/11/28/south-korea-suspects-north-korea-linked-lazarus-behind-usd36m-upbit-hack","name":"","type":"other","archive_url":"http://web.archive.org/web/20260317192405/https://www.coindesk.com/markets/2025/11/28/south-korea-suspects-north-korea-linked-lazarus-behind-usd36m-upbit-hack","credibility":3,"archive_timestamp":"2026-03-17T19:24:05+00:00"},{"url":"https://www.halborn.com/blog/post/explained-the-upbit-hack-november-2025","name":"","type":"other","archive_url":"http://web.archive.org/web/20260516231950/https://www.halborn.com/blog/post/explained-the-upbit-hack-november-2025","credibility":3,"archive_timestamp":"2026-05-16T23:19:50+00:00"},{"url":"https://www.ccn.com/education/crypto/upbit-2025-hack-36-million-solana-assets-stolen/","name":"","type":"other","archive_url":"http://web.archive.org/web/20260108231157/https://www.ccn.com/education/crypto/upbit-2025-hack-36-million-solana-assets-stolen/","credibility":3,"archive_timestamp":"2026-01-08T23:11:57+00:00"},{"url":"https://www.thecoinrepublic.com/2025/12/07/south-korea-to-impose-bank-level-liability-on-crypto-exchanges-after-upbit-hack/","name":"","type":"other","archive_url":"https://web.archive.org/web/20260829181505/https://www.thecoinrepublic.com/2025/12/07/south-korea-to-impose-bank-level-liability-on-crypto-exchanges-after-upbit-hack/","credibility":3,"archive_timestamp":"2026-08-29T18:15:05+00:00"},{"url":"https://www.coindesk.com/markets/2018/12/21/executives-at-korean-crypto-exchange-upbit-indicted-for-fraud","name":"","type":"other","archive_url":"https://web.archive.org/web/20260915165158/https://www.coindesk.com/markets/2018/12/21/executives-at-korean-crypto-exchange-upbit-indicted-for-fraud","credibility":3,"archive_timestamp":"2026-09-15T16:51:58+00:00"},{"url":"https://bitcoinist.com/upbit-exchange-execs-cleared-of-fraud-charges-in-south-korea/","name":"","type":"other","archive_url":"http://web.archive.org/web/20260112211222/https://bitcoinist.com/upbit-exchange-execs-cleared-of-fraud-charges-in-south-korea/","credibility":3,"archive_timestamp":"2026-01-12T21:12:22+00:00"},{"url":"https://www.coindesk.com/policy/2025/11/25/upbit-considering-appeal-of-usd25m-fine-by-south-korea-regulator","name":"","type":"other","archive_url":"http://web.archive.org/web/20260106235827/https://www.coindesk.com/policy/2025/11/25/upbit-considering-appeal-of-usd25m-fine-by-south-korea-regulator","credibility":3,"archive_timestamp":"2026-01-06T23:58:27+00:00"},{"url":"https://cryptobriefing.com/upbit-sanctions-over-aml-kyc/","name":"","type":"other","archive_url":"http://web.archive.org/web/20260114165801/https://cryptobriefing.com/upbit-sanctions-over-aml-kyc/","credibility":3,"archive_timestamp":"2026-01-14T16:58:01+00:00"},{"url":"https://cointelegraph.com/news/south-korea-court-cancels-dunamu-upbit-suspension-fiu","name":"","type":"other","archive_url":"http://web.archive.org/web/20260420064350/https://cointelegraph.com/news/south-korea-court-cancels-dunamu-upbit-suspension-fiu","credibility":3,"archive_timestamp":"2026-04-20T06:43:50+00:00"},{"url":"https://cryptonews.com/news/south-korean-crypto-exchange-upbit-faces-monopoly-investigation/","name":"","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://cryptoslate.com/south-korea-investigates-upbit-over-market-dominance-concerns/","name":"","type":"other","archive_url":"http://web.archive.org/web/20250907054211/https://cryptoslate.com/south-korea-investigates-upbit-over-market-dominance-concerns/","credibility":3,"archive_timestamp":"2025-09-07T05:42:11+00:00"},{"url":"https://www.nasdaq.com/articles/upbit-shifts-to-cold-wallets-after-160k-hacking-attempts-in-first-half-of-2023","name":"","type":"other","archive_url":"http://web.archive.org/web/20251207034756/https://www.nasdaq.com/articles/upbit-shifts-to-cold-wallets-after-160k-hacking-attempts-in-first-half-of-2023","credibility":3,"archive_timestamp":"2025-12-07T03:47:56+00:00"},{"url":"https://www.cylynx.io/blog/tracing-the-trail-of-the-upbit-hack/","name":"","type":"other","archive_url":"http://web.archive.org/web/20260415075306/https://www.cylynx.io/blog/tracing-the-trail-of-the-upbit-hack","credibility":3,"archive_timestamp":"2026-04-15T07:53:06+00:00"},{"url":"https://www.welivesecurity.com/2019/11/27/upbit-cryptocurrency-exchange-hack/","name":"","type":"other","archive_url":"http://web.archive.org/web/20260118100055/https://www.welivesecurity.com/2019/11/27/upbit-cryptocurrency-exchange-hack/","credibility":3,"archive_timestamp":"2026-01-18T10:00:55+00:00"},{"url":"https://finance.yahoo.com/news/south-korea-pushes-no-fault-045833985.html","name":"","type":"other","archive_url":"http://web.archive.org/web/20260105104805/https://finance.yahoo.com/news/south-korea-pushes-no-fault-045833985.html","credibility":3,"archive_timestamp":"2026-01-05T10:48:05+00:00"},{"url":"https://finance.yahoo.com/news/south-koreas-upbit-exchange-faces-123601295.html","name":"","type":"other","archive_url":"https://web.archive.org/web/20260829114815/https://finance.yahoo.com/news/south-koreas-upbit-exchange-faces-123601295.html","credibility":3,"archive_timestamp":"2026-08-29T11:48:15+00:00"},{"url":"https://www.financemagnates.com/cryptocurrency/south-koreas-crypto-exchange-upbit-faces-suspension-over-kyc-violations/","name":"","type":"other","archive_url":"http://web.archive.org/web/20260731011653/https://www.financemagnates.com/cryptocurrency/south-koreas-crypto-exchange-upbit-faces-suspension-over-kyc-violations/","credibility":3,"archive_timestamp":"2026-07-31T01:16:53+00:00"},{"url":"https://www.koreatimes.co.kr/www/biz/2024/10/602_384310.html","name":"","type":"other","archive_url":"https://web.archive.org/web/20260829050401/https://www.koreatimes.co.kr/business/banking-finance/20241015/south-koreas-upbit-faces-monopoly-accusations?utm_source=legacy_url&utm_medium=redirect&utm_campaign=news_manager_id","credibility":3,"archive_timestamp":"2026-08-29T05:04:01+00:00"},{"url":"https://beincrypto.com/upbit-solana-hack-2025-loss/","name":"","type":"other","archive_url":"http://web.archive.org/web/20260118191823/https://beincrypto.com/upbit-solana-hack-2025-loss/","credibility":3,"archive_timestamp":"2026-01-18T19:18:23+00:00"}],"source_tags":["defillama"],"addresses":[],"reviewed":true,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-05-04T02:54:14.884643+00:00","updated_at":"2026-09-15T17:10:49.505244+00:00"}}