TLDR
Upbit halted Solana deposits because it detected an unauthorized outflow from its Solana hot wallet.
- About 54 billion KRW (~$3638M) was moved to unknown wallets, per an exchange update and reporting by The Block. details
- The breach touched multiple Solana tokens (SOL, USDC, BONK, JUP, RAY, PYTH, ORCA), prompting a full pause to protect users. scope
- Upbit pledged full reimbursement and began restoring services, with deposits set to resume using new addresses. notice
Deep Dive
1. Hot-Wallet Breach
Upbits halt was triggered by abnormal withdrawals from its Solana hot wallet, not a failure of the Solana protocol.
- The exchange reported roughly 54 billion KRW moved to an unauthorized address and suspended deposits and withdrawals to inspect the incident. exchange update
- Bloomberg similarly noted an urgent service suspension tied to a ~$37M unauthorized transfer to an external wallet. coverage
The pause was a containment step to prevent further drain while isolating hot wallets and shifting funds to cold storage.
2. Scope On Solana
The incident spanned multiple Solana ecosystem tokens, which broadened the operational risk and warranted a network-wide pause.
- Reports list SOL, USDC, BONK, JUP, RAY, RENDER, ORCA and PYTH among affected tokens. summary
- Crypto.news cited at least 24 Solana-based tokens involved and noted on-chain freezing efforts for some assets (for example, LAYER). scope and response
When many tokens are touched across one network, exchanges often suspend that networks rails to avoid cascading impacts on user balances and settlements.
3. User Protection And Resumption
Upbit said users would be fully reimbursed and began steps to re-open with stronger wallet hygiene.
- The exchange pledged to cover all losses from reserves and moved assets to cold storage. assurance
- Deposits and withdrawals were scheduled to resume with new deposit addresses, improving security posture and preventing reuse of compromised keys. restart plan
Expect phased restoration and new address requirements. Users should regenerate deposit addresses before sending funds to Upbit.
Conclusion
Upbits Solana deposit halt was a protective response to a targeted hot-wallet exploit affecting multiple Solana tokens. The exchange committed to full user reimbursement and to resuming services with new deposit addresses and tightened wallet controls. This points to an exchange infrastructure breach rather than a Solana protocol issue, with operational checks and address rotation used to reduce future risk.
CoinsKid.Com