TLDR
About $3637 million was drained from Upbits Solana hot wallet, including SOL, USDC, BONK and other Solana ecosystem tokens per an exchange news report.
- Approximate loss was 54 billion KRW, focused on Solana-chain assets per a news summary.
- Affected tokens included SOL, USDC, BONK, RAY, JUP, PYTH, ORCA, RENDER, JTO, LAYER and more per a detailed report.
- Some funds (for example LAYER) were frozen on-chain; Upbit said users would be made whole per the notice covered above.
Deep Dive
1. Size And Network
The breach targeted a Solana-network hot wallet and totaled roughly 54 billion KRW (about $3637 million). Upbit suspended Solana deposits/withdrawals and moved assets to cold storage to contain losses, and pledged to reimburse customers fully per a Yahoo Finance report.
- Coverage consistently describes the event as an abnormal withdrawal concentrated on Solana-based assets per the report above.
- Independent summaries align on the USD range and Solana focus per a Bitcoinist article.
2. Tokens Affected
Multiple Solana ecosystem tokens were siphoned. Reports list SOL, USDC, ACS, BONK, RAY, JUP, PYTH, ORCA, JTO, LAYER, RENDER, among others per a token enumeration.
- Broader lists of affected assets appear in several news recaps; examples include SOL and USDC per the Yahoo Finance item above.
- The diversity of assets suggests a broad Solana hot wallet drain rather than a single-token exploit per the Bitcoinist coverage.
3. Freeze Efforts And Probe
Upbit coordinated to freeze a portion of the outflow (around 12 billion KRW in LAYER) and stated customers would be made whole per the Yahoo Finance report. South Korean authorities opened an investigation; early reports noted suspicion of the Lazarus Group based on tactics resembling 2019s incident per a Reuters summary via Yahoo.
- Temporary suspensions of deposits/withdrawals aimed to protect user assets per the notice above.
- Investigators cited parallels to the 2019 hack in their initial assessment per the Reuters/Yahoo item above.
Hot wallets are online and convenient but carry higher theft risk. For significant balances, prioritize cold storage and diversified custody, and monitor exchange notices during incident windows.
Conclusion
The Upbit hack primarily drained Solana-chain assets totaling about $3637 million, spanning a wide set of tokens. The exchange froze part of the funds and committed to reimburse users, while authorities probe attribution. The episode underscores the security trade-offs of hot wallets and the importance of rapid incident response and asset-level freezes.
