TLDR
South Koreas main financial regulator has started formal sanctions proceedings against Upbits parent Dunamu after a major 2025 crypto hack.
- The Financial Supervisory Service sent an inspection opinion letter over a $36 million wallet breach, officially opening the sanctions process.
- Upbit has reimbursed users and overhauled its wallet architecture, but faces scrutiny over security and delayed disclosure of the incident.
- Lawmakers are planning to add explicit hacking penalties and compensation rules, which could reshape crypto exchange compliance in South Korea.
Deep Dive
1. What Action South Korea Took
South Koreas Financial Supervisory Service (FSS) has sent an inspection opinion letter to Dunamu, which operates Upbit, regarding a November 2025 hack that drained about 36 million dollars from Solana based wallets. This letter is the formal starting point of a sanctions procedure, giving Dunamu a chance to respond before regulators decide penalties, according to reporting on the FSS action against Dunamu.
Regulators are examining both the technical failure and how quickly Upbit informed users, since the breach lasted about 54 minutes but was only announced after a corporate event later that day.
2. Impact On Upbit And Users
Following the hack, Upbit froze roughly 2.3 billion won in funds, moved assets to cold storage, and pledged to fully reimburse affected customers using its own balance sheet, as described in coverage of the incident. The exchange also rebuilt its wallet architecture and launched the Onchain AI Tracer System to track stolen funds on chain.
At the same time, Upbit now faces reputational and regulatory pressure. The FSS is testing how existing rules under the Virtual Asset User Protection Act apply to cyber incidents, even though that law does not yet contain clear sanctions for hacks.
For Korean users, large exchanges are under tighter pressure to prove robust security and transparent communication, which can improve protection but may also lead to stricter operating conditions.
3. How Rules Could Change Next
Because the current law lacks explicit penalties for hacking or system failures, South Korean authorities plan to add sanctions and compensation provisions for cyberattacks in the next phase of the Digital Asset Basic Act, as noted in reports on the FSSs plans.
This would create clearer obligations for exchanges around security, incident reporting, and user compensation. It also aligns with broader efforts by the Financial Services Commission to step up surveillance of unfair trading and abuse in the virtual asset markets.
Conclusion
South Koreas move against Dunamu signals that regulators now treat major crypto hacks as policy issues, not isolated technical mishaps. The immediate impact is focused on Upbit, but the more important shift is toward stronger, more explicit rules on exchange security and user protection, which other jurisdictions may watch and possibly follow.
CoinsKid.Com