Which CEX confirmed a hack?

TLDR

Upbit (UPBIT) confirmed a hack on Nov 27, with losses reported around $3036 million and a full reset of deposit addresses following the breach reported here and here.

1. Upbit said it overhauled wallet security and warned users to regenerate deposit addresses after the incident details here.
2. South Korea moved to bank?level, no?fault liability rules for exchanges in response to the Upbit hack regulatory update.
3. Separately, Phemex acknowledged an earlier 2025 security incident and described its rebuild exchange note.

Deep Dive

1. Upbit Confirmation

Upbit publicly acknowledged the breach and took corrective action, including deleting all prior user deposit addresses.

• The exchange advised every user to create new deposit addresses across assets and networks after the hot?wallet incident with unauthorized transfers exchange actions.
• Coverage of losses varies by source, with figures near $30.1 million tied to Solana?based assets policy reaction.

2. Regulatory Response

The hack triggered stronger investor?protection proposals in South Korea.

1. Officials proposed bank?style, no?fault liability so exchanges must compensate users for hacking losses regardless of fault policy reaction.
2. Authorities also flagged recurring system failures across major exchanges, pushing for stricter IT security standards and higher penalties policy context.

3. Other Exchange Acknowledgement

Phemexs CEO said the platform faced a security incident earlier in 2025 and outlined architecture changes.

• Phemex described adding a warm wallet layer and hardware security modules to tighten operations while maintaining fast withdrawals exchange note.

Conclusion

Upbit is the major CEX that explicitly confirmed a recent hack and implemented user?visible changes (new deposit addresses), while South Korea moved to harden exchange accountability. Separately, Phemex acknowledged an earlier 2025 incident and detailed its security rebuild.