Solana

when

South Korean crypto exchange Upbit suffered a significant security breach on November 27, 2025, after detecting unauthorized withdrawals of Solana-based digital assets valued at approximately ₩44.5 billion ($33–36 million).&nbsp;
The incident prompted an immediate shutdown of all deposit and withdrawal services linked to the Solana network, as the exchange moved to contain the attack and initiate emergency inspections.
Upbit <a href="https://www.upbit.com/service_center/notice?id=5800&amp;view=share" rel="noopener noreferrer nofollow">said</a> the abnormal withdrawal activity occurred around 04:42 local time and originated from one of its hot wallets, which store assets connected to live trading systems. The exchange emphasized that its cold wallets, offline storage used to safeguard the bulk of customer funds, remained secure and uncompromised.
Initially estimated at ₩54 billion, the figure was later updated to reflect accurate market prices at the time of the breach. The exploit impacted a wide array of Solana ecosystem assets, including SOL, USDC, BONK, JUP, RAY, RENDER, ORCA, PYTH, and more than a dozen other tokens, such as DRIFT, IO, MEW, TRUMP, and Solaire (LAYER).&nbsp;
Some of the stolen assets were successfully frozen, approximately ₩2.3 billion worth of LAYER tokens, while the remainder was transferred to unidentified external wallets.
Upbit disclosed all affected wallet addresses and launched an “enhanced security review” across all networks, not only Solana. The exchange also moved all remaining Solana-based assets into cold storage to prevent further unauthorized transfers.&nbsp;
Forensic specialists, blockchain teams, and external partners are assisting in tracking the outflows and freezing additional tokens.
Oh Kyung-seok, CEO of Dunamu, Upbit’s parent company, issued a public apology and assured users that all losses will be fully covered by Upbit’s own reserves, ensuring that customer assets remain unaffected.&nbsp;
“We immediately suspended services and identified the extent of the outflow. The entire amount will be compensated by Upbit,” he said.
The incident echoes <a href="https://hash.media/hashdesk/south-korea-fiu-set-to-sanction-korbit-bithumb-coinone-gopax/" rel="noopener noreferrer nofollow">Upbit’s</a> 2019 hack, when the exchange lost 342,000 ETH in an attack later attributed to North Korean state-linked actors. The latest breach raises renewed concerns about vulnerabilities in hot-wallet infrastructure across centralized exchanges.
pay3 (pay3.so) is a crypto payment platform that replaces wallet addresses with usernames. Accept USDT, USDC, ETH, and BNB through one simple link: pay3.so/@yourname

Upbit hit by ₩44.5B hot-wallet hack, halts Solana transfers

Todayq News

Other articles published on Nov 27, 2025

Grayscale Registers Zcash Trust, Eyes $ZEC ETPs

Bitcoin bounces to seven-day highs, but can BTC break $95K on Thanksgiving?

Do Kwon says five-year US sentence is enough as he faces 40 years in South Korea

Bithumb Temporarily Halts MERL Deposits and Withdrawals for Major Network Upgrade

Ethereum Breakout Imminent: Key Signals Traders Can't Ignore

JPMorgan files structured notes linked to BlackRock’s IBIT

Join our free newsletter for daily crypto updates!