Upbit Exchange Suffers Major Hack; Pledges Full Customer Reimbursement

Key Points:

  • Upbit Exchange compromised with $36 million in virtual assets stolen by suspected Lazarus Group.
  • No customer losses as Upbit pledges reimbursement.
  • Authorities investigate potential North Korean state involvement.

South Korean exchange Upbit experienced a theft of virtual assets worth 44.5 billion won, reportedly by North Korea-linked Lazarus Group, prompting government and ICT industry investigations.

The hack highlights ongoing cybersecurity threats to crypto exchanges, affecting market confidence and prompting Upbit to halt certain transactions and assure customers of reimbursement.

Upbit Confirms $36 Million Hack by Suspected Lazarus Group

The recent hack on Upbit Exchange, South Korea’s largest virtual asset platform, has drawn significant attention. The breach saw the theft of 44.5 billion won in assets primarily from the Solana network. The Lazarus Group, linked to North Korea, is highly suspected of orchestrating the attack. Authorities have initiated an on-site investigation, reminiscent of the 2019 attack also attributed to Lazarus.

Upbit’s CEO, Oh Kyoung-suk, confirmed the incident, emphasizing customer protection and a promise of reimbursement using company reserves. Immediate actions included halting deposits and withdrawals for Solana assets and securing funds in cold wallets. These measures aim to mitigate further financial risk and maintain customer trust amidst the hacking scandal.

“Immediately after detecting the abnormal withdrawal activity, we prioritized protecting member assets by halting deposit and withdrawal services and initiating a comprehensive inspection.” He also assured, “We plan to fully cover any potential losses using Upbit’s own assets to ensure no harm comes to customer funds.”

Reactions have varied across sectors. Government agencies, including South Korea’s Korea Internet & Security Agency (KISA), are closely involved, scrutinizing the matter thoroughly to confirm Lazarus Group’s involvement. Community responses are marked by heightened vigilance, with assets like LAYER frozen and tracing of stolen funds ongoing.

Solana Price Dynamics and Security Implications

Did you know? Yonhap News Agency reported the first Lazarus-linked Upbit hack occurred exactly six years ago, on November 27, 2019. The persistence of repeated methodologies illustrates ongoing cybersecurity challenges for exchanges globally.

Based on CoinMarketCap data, Solana’s current price stands at $139.02 with a market cap of $77.77 billion. The last 24 hours showed a trading volume of $3.36 billion, down by 36.70%. Solana’s price fluctuated, decreasing by 2.98% over 24 hours but up 4.03% over the past week. The cryptocurrency market is keenly observing such trends amid security concerns.

solana-daily-chart-308

Solana(SOL), daily chart, screenshot on CoinMarketCap at 02:21 UTC on November 28, 2025. Source: CoinMarketCap

Insights from Coincu’s research team suggest that the recent breach emphasizes the need for robust security frameworks within crypto infrastructure. This incident may lead to increased regulatory scrutiny and highlight the necessity for exchanges to adopt enhanced technological safeguards.

Source: https://coincu.com/news/upbit-hack-lazarus-group-2025/