Synopsis: Korea’s top exchange Upbit suspended Solana deposits/withdrawals after $37M unauthorized hot wallet drain of BONK, JUP, SOL tokens. Assets shifted to cold storage; full user compensation pledged.
Korea’s top crypto exchange Upbit has urgently suspended deposits and withdrawals after detecting abnormal activity worth about $37 million in tokens on the Solana network. The irregular movements involved multiple Solana-linked tokens transferred to unauthorized wallets, prompting swift action to protect user assets and maintain platform security.
Sudden Suspension
Upbit halted deposits and withdrawals early Thursday following the discovery of unusual withdrawal behavior from its hot wallets. The tokens involved included various Solana ecosystem assets such as DoubleZero (2Z), BONK, Drift (DRIFT), Jito (JTO), Jupiter (JUP), Magic Eden (ME), and others.
Approximately 54 billion Korean won (about $37 million) moved out to unknown wallets without permission. In response, the exchange immediately moved remaining funds to cold wallets and froze assets worth about 12 billion won connected to the Solayer (LAYER) token. CEO Oh Kyung-seok apologized for the inconvenience, assuring users that Upbit will cover all losses to fully protect customer assets.
Details of the Security Breach
The breach exploited a vulnerability in Upbit’s hot wallets used for fast transactions on the Solana blockchain. The hacker reportedly conducted rapid unauthorized transfers targeting at least 20 Solana-related tokens, including high-profile memecoins and DeFi tokens.
On-chain freezing mechanisms, coordinated with Korean law enforcement, have so far recovered 22% of the stolen assets. This is Upbit’s largest security incident since their 2019 Ethereum hack. The incident highlights ongoing risks associated with centralized exchanges’ hot wallets despite advanced blockchain technology like Solana’s high throughput capacity.
Impact on Users and Market Reactions
While Upbit has pledged full reimbursement, the temporary halt caused inconvenience and frustration among users unable to trade or withdraw affected tokens. Despite this, Solana’s native token SOL surprisingly rose 5% following the news, and other involved memecoins maintained stable or bullish momentum.
The reaction suggests market confidence in Upbit’s quick response and financial backing to mitigate losses. However, the incident renews concerns about centralized exchange vulnerabilities and may increase calls for decentralized custody solutions.
What’s Next for Upbit and the Crypto Sector?
Upbit is conducting a comprehensive security audit and plans a gradual resumption of withdrawal services after confirming system integrity. Korean regulators like the Financial Supervisory Service (FSS) and Korea Internet & Security Agency (KISA) have launched investigations, increasing regulatory scrutiny on exchange security.
This incident also comes shortly after Dunamu finalized a major partnership with Naver for blockchain expansion and amid preparations for a high-profile U.S. IPO, putting extra spotlight on Upbit’s operations. Users are advised to stay vigilant against scams and keep track of official updates from Upbit.
This event shows the delicate balance between convenience and security in crypto trading. While Upbit’s quick action and commitment to cover losses protect users, it highlights persistent risks in the crypto ecosystem. Staying informed and cautious remains essential as exchanges ramp up defenses against threats in this fast-evolving space.
This saga shows that even top exchanges on advanced networks like Solana are not immune to cyber threats. Users hope that Upbit’s experience leads to stronger security and greater trust across the industry. For now, the focus remains on securing assets, restoring full service, and learning from this disruption to prevent repeat incidents. The crypto community watches closely as investigation and recovery efforts unfold.
Written By Fazal Ul Vahab C H
