Solana

Bitcoin

Read

would

<p>The case quickly took a diplomatic turn. After the Upbit hack, Binance is accused in Seoul of having frozen only a small part of the stolen funds. The exchange, however, firmly disputes this version and assures it acted immediately.</p>
<div class="in-brief">
 <div class="in-brief--container">
  <span class="in-brief--border-top"></span> <span class="in-brief--border-bottom"></span>
  <h2 class="in-brief--title" id="in-brief">In brief</h2>
  <ul>
   <li>Binance denies any delay after the Upbit hack and assures it froze suspicious flows from the first hours, in connection with the authorities.</li>
   <li>South Korean investigators claim that a limited portion of the funds was blocked, while hackers quickly dispersed assets via swaps and cross-chain bridges.</li>
   <li>Upbit shifts 99% of client funds to cold storage, while the controversy continues and Bitcoin reserves on Binance reach a five-year low.</li>
  </ul>
 </div>
</div>
<h2 id="h-binance-defends-itself-says-it-acted-without-delay">Binance defends itself, says it acted without delay</h2>
<p>Binance <a href="https://www.cointribune.com/en/binance-strengthens-its-ties-with-trump-via-the-usd1-stablecoin/" rel="noopener noreferrer nofollow">tightens its ties with Trump</a> by highlighting a stablecoin. At the same time, the exchange must respond to a more sensitive controversy: its reaction after the Upbit hack. In a statement, a Binance spokesperson described these accusations as inaccurate and unfounded.</p>
<div class="my-4">
 <div class="ads ">
 </div>
</div>
<p>According to the company, its teams detected suspicious movements from the first hours and blocked transfers related to the hacking. Binance says it acted immediately to freeze transactions, limit movements, and cooperate with local South Korean authorities.</p>
<p>This response follows local articles claiming Binance froze only about 17% of the reported funds. A figure the company considers misleading. According to Seoul, hackers used more than a thousand wallets to launder quickly, making freezing and traceability difficult.</p>
<div class="affiliate-button">
 <a class="affiliate-button__link" href="https://accounts.binance.com/en/register?ref=35547494" rel="noopener noreferrer nofollow">Your 1st cryptos with Binance</a> <a class="affiliate-button__disclaimer" href="https://www.cointribune.com/en/sponsored-content/" rel="noopener noreferrer nofollow">This link uses an affiliate program.</a>
</div>
<h2 id="h-a-sophisticated-hack-a-fast-laundering">A sophisticated hack, a fast laundering</h2>
<p>The hacking, which occurred on November 27, targeted Upbit’s Solana hot wallet. In a few hours, the attackers dispersed $30 million via chain hopping, swaps, and cross-chain bridges. These methods suggest organized groups; South Korean media cite Lazarus, already linked to crypto attacks.</p>
<p>Investigators say about 470 million won, nearly $370,000 in <a href="https://www.cointribune.com/en/tag/solana-sol-en/" rel="noopener noreferrer nofollow">Solana</a> tokens, were reported to have transited through Binance. According to the same sources, the authorities only froze 80 million won, about $75,000. Binance, for its part, <a href="https://cryptonews.com/news/binance-rejects-claims-of-delayed-response-in-upbit-hack-case/" rel="noopener noreferrer nofollow">disputes this interpretation</a> and refers to a classic point in these cases: certain requests require additional checks before extending a freeze on a larger scale.</p>
<h2 id="h-upbit-tightens-security-after-the-attack">Upbit tightens security after the attack</h2>
<p>In the wake of this, Upbit announced it would move 99% of client funds to cold storage, well above South Korean regulatory requirements that mandate a minimum of 80%. The platform, already known to be cautious, stored 98.33% of its assets offline before the incident but is now accelerating this shift to reduce hot wallet exposure to nearly zero.</p>
<p>Operator Dunamu presents this change as one of the strictest responses seen at a major exchange. But the investigation continues and the dividing line remains: after the Upbit hack, Binance insists it reacted immediately, while South Korean authorities believe only part of the funds was frozen in time. In this climate of distrust, another signal feeds tensions: <a href="https://www.cointribune.com/en/binance-sees-lowest-btc-levels-in-5-years/" rel="noopener noreferrer nofollow">Bitcoin reserves on Binance have also just dropped to their lowest</a> level in five years.</p>

Binance Pushes Back Against Criticism Over Its Handling of the Upbit Hack

Table of Contents

Cointribune EN

Other articles published on Dec 16, 2025

PayPal’s Bold Move: A New Bank for Small Business Loans Could Transform Financing

Visa launches USDC settlement for US banks on Solana blockchain

Ronin and ZKsync’s onchain metrics fell the most in 2025

VECTOR Goes Live as Cardano’s Institutional Expansion Chain

Kaspa Price Action at $0.0435 Suggests Possible Downward Pressure

PayPal Applies for Utah Industrial Bank License

Join our free newsletter for daily crypto updates!