Upbit Hack Exposes $36 Million: Solana Tokens Targeted

Upbit, South Korea’s largest cryptocurrency exchange, lost approximately 44.5 billion KRW ($36 million USD) in stolen assets due to a sophisticated hack on November 27, 2025.

The event underscores ongoing cybersecurity challenges facing digital asset exchanges, with implications for regulatory oversight and market stability, as experts suspect North Korea’s involvement.

Upbit Hack: $36 Million Theft and Immediate Response

Upbit’s hack involved the loss of 44.5 billion KRW in digital assets primarily connected to the Solana blockchain. The attack method reportedly involved inferring private keys by analyzing wallet address patterns, a difficult technique Ki Young Ju, CEO of CryptoQuant, attributes likely only to North Korea’s Lazarus Group. Investigations by South Korean authorities and Upbit’s response by suspending all digital operations and moving funds to cold wallets are ongoing.

Immediate reimbursements have been announced by Upbit, compensating users from their reserves. The CEO, Oh Kyung-suk, affirmed the commitment to covering all damages, materializing Upbit’s stance on user security. Experts, including Hwang Suk-jin, suggest the attack may coincide with high-profile corporate mergers, drawing attention to possible insider threats or advanced external support.

“We plan to fully cover any damages using Upbit’s own assets to ensure no harm comes to customer funds,” apologized Oh Kyoung-suk publicly for the hack, promising tightened security and cooperation with regulators.

Historical Breaches and Market Impact

Did you know? In 2019, Upbit faced a similar hack on the same date by the Lazarus Group, underscoring the persistent threat from state-backed actors against cryptocurrency exchanges.

According to CoinMarketCap, Solana’s current valuation stands at $135.81, with a market cap of approximately $76 billion. Trading volume dropped by 47.44% in the past 24 hours, mirroring negative price trends over recent months.

Experts from Coincu suggest ongoing attention to cybersecurity and possible regulatory enhancements. They highlight the critical need for technological upgrades to prevent similar breaches, as reported in Upbit discloses $5.9B loss from hack, users fully reimbursed, emphasizing historical losses and market vulnerabilities to state-backed attacks.