Korean watchdog pursues sanctions over exchange hack

TLDR

South Koreas main financial regulator is formally pursuing sanctions against Upbits parent Dunamu after a multimillion dollar hack, spotlighting stricter oversight of local crypto exchanges.

1. The Financial Supervisory Service sent Dunamu an inspection opinion letter over Upbits November 2025 hack, starting a multi stage sanctions process.
2. The case exposes legal gaps around exchange hacks and is driving new rules to add explicit penalties, compensation, and stronger market abuse tools.
3. Korean crypto users should watch both the eventual penalties on Upbit and upcoming legislation that could reshape exchange security, disclosure, and trading risk.

Deep Dive

1. Sanctions Case Against Upbit

South Koreas Financial Supervisory Service (FSS) has begun formal sanctions proceedings against Dunamu, which operates Upbit, by issuing an inspection opinion letter over a wallet breach that hit Solana based assets in November 2025. Reports put losses around $30 to $36 million, with Korean sources estimating 44.5 billion won (about $32 million) in stolen funds, making it one of the countrys largest exchange hacks in recent years sanctions process report.

The letter lets Dunamu respond to inspection findings before the regulator sets a proposed sanction level, which then moves through committees and the Financial Services Commission for final approval regulatory stages. Upbit has said it froze roughly 2.3 billion won (about $1.5 million), pledged full reimbursement from its own balance sheet, overhauled wallet architecture, and launched an onchain tracing system to follow the stolen funds exchange response.

2. Regulatory Gaps And New Rules

Regulators are testing whether Upbit breached the Virtual Asset User Protection Act, which covers custody and unfair trading but does not clearly specify sanctions for hacks or IT failures, leaving the severity of possible penalties uncertain legal gap analysis.

Authorities plan to close these gaps in the second phase of the Digital Asset Basic Act by adding explicit sanctions and compensation rules for cyberattacks and system incidents planned reforms. Parallel proposals include account freezes for abusive trading and whistleblower bounties for market manipulation cases, aligning crypto oversight more closely with traditional capital markets market abuse measures.

3. Implications For Users And Market

Upbit is one of Koreas largest exchanges by spot volume, so sanctions or stricter rules could influence how other platforms handle security incidents and communications exchange ranking context.

For Korean retail traders, stronger rules and a precedent for reimbursement can improve user protection, but tools like account freezes and tighter surveillance may also increase compliance friction and could push some riskier activity offshore. The timing matters, as the sanctions process overlaps with Dunamus pending share swap with Naver Financial, which is still under review transaction timing.

Confidence: high because multiple reputable reports describe the same regulator letter, hack details, and planned legal changes.

Conclusion

Sanctions against Dunamu over the Upbit hack are both a response to a major security failure and a catalyst for Koreas next wave of digital asset regulation. As explicit penalties and compensation rules for hacks are written into law, Korean exchanges will need stronger operational security and faster incident disclosure, which could improve user safety but raise compliance costs and reshape where and how local traders participate in crypto markets.