TLDR
Upbit froze part of the stolen funds after its late?November hack, and Binance froze a smaller portion traced to its platform.
- Upbit froze about $1.77 million of hacked assets as part of recovery efforts and coordination with other venues (crypto news report).
- Binance reportedly froze only ~17% of the amount requested by South Korean police (about 80 million won) after the Upbit hack (industry coverage).
- Upbit moved 99% of user funds to cold wallets to harden security post?incident (exchange update coverage).
Deep Dive
1. Upbits Freeze
Upbit initiated a targeted freeze and asset?recovery program, locking roughly $1.77 million linked to the breach and sharing blacklisted wallets with partner exchanges to halt inflows from flagged sources (crypto news report).
- The exchange deployed an on?chain tracking system and launched a recovery contribution reward to incentivize tracing and freezing stolen funds (the report above).
- Public statements noted customer losses were covered by corporate reserves while recovery efforts continued (the report above).
Prompt freezes plus broad exchange coordination can materially improve recovery odds and limit further laundering.
2. Binances Partial Freeze
South Korean authorities and Upbit requested Binance freeze about 470 million won of traced Solana tokens; Binance froze only ~80 million won (about 17%) after a verification delay, citing policy around active investigations (industry coverage).
- Additional reports reiterated the 17% figure and noted the freeze confirmation occurred roughly 15 hours after the initial request (alternate coverage).
- Experts stressed rapid initial freezes help limit damage, proposing an emergency inter?exchange hotline to accelerate coordinated action (the Cointelegraph article above).
Cross?border freezes often hinge on exchange policies and legal risk checks. Speed and standard procedures across venues are critical to reduce losses in real time.
3. Security Hardening
In response, Upbit shifted 99% of customer assets to cold storage, exceeding national rules that require at least 80% offline, to reduce hot?wallet exposure and future attack surface (exchange update coverage).
- The move may decrease on?chain withdrawal liquidity during stress, but materially improves custody resilience (the report above).
Security posture changes can trade immediate convenience for stronger protection, which is often prudent after a hot?wallet compromise.
Conclusion
Upbit froze a meaningful slice of the stolen assets and hardened custody, while Binance froze a smaller portion of the traced funds after verification. The episode underscores how rapid, coordinated freezes and stronger custody setups can curb losses, but also how cross?venue policies and legal checks can slow response during fast?moving thefts.
