Major exchange ends trading for hacked token

TLDR

Upbit, a major South Korean exchange, is ending ICON (ICX) trading after a serious replay attack on the ICON network exposed security weaknesses.

1. Upbit will stop ICX/KRW trading and cancel open orders following an August replay attack that released about 119.9 million ICX and shut the network for about 25 hours.
2. ICX withdrawals stay open for a limited window, but losing a big fiat market hurts liquidity, price discovery and confidence in both the token and the chains security.
3. Users should watch how other venues respond, what security fixes ICON ships, and whether further delistings or restrictions appear across exchanges.

Deep Dive

1. What Upbit Is Doing And Why

Upbit announced it will end trading support for ICON (ICX) against the Korean won, closing the ICX/KRW market and cancelling remaining orders at 06:00 UTC on 19 Oct, with withdrawals open until 18 Nov.

The move follows an investment warning placed on ICX after an Aug. 27 replay attack on the ICON network, where two signed withdrawal messages were replayed 1,492 times, releasing around 119.9 million ICX and 531,600 bnUSD, and leaving the network down for about 25 hours, according to Upbits ICX notice.

Upbit says the reasons for the warning remain unresolved, so it will no longer support ICX trading, airdrops, wallet upgrades, migrations or hard forks on its platform.

2. Impact On ICON Holders And Liquidity

Upbit is one of the largest KRW exchanges, so closing ICX/KRW removes a key fiat on-ramp and off-ramp for Korean users and cuts a major source of volume and price discovery.

Holders on Upbit retain a withdrawal window, but anyone who does not move tokens in time risks being stuck without easy access via that venue. Off-exchange ICX holders face reduced overall liquidity and possibly wider spreads if other exchanges do not pick up the lost volume.

Reputationally, a hack plus the loss of a flagship local listing weakens confidence in ICONs operational security and governance until the chain demonstrates robust fixes and incident response.

3. What To Watch Next

1. ICONs technical response: audits, protocol upgrades, and public post?mortems that show how replay risks are being mitigated.
2. Other exchanges policies: whether major global venues maintain or curtail ICX markets, which would signal broader risk perception.
3. On-chain metrics: network uptime and activity recovering to pre?attack levels, which would suggest users and apps still trust the chain.

Conclusion

Upbit ending ICX trading is a clear sign that a major venue sees unresolved risk after the ICON replay attack, with direct consequences for liquidity and local access.

For crypto users, the key is not just this single delisting but whether ICON convincingly fixes its security issues and whether other exchanges follow Upbits lead or continue to support the token.