Upbit parent Dunamu faces sanctions process by South Korean regulator
Financial authorities initiate sanctions over Upbit's $36 million hack incident.
1Regulator's Formal Action
South Korea's Financial Supervisory Service (FSS) sent an inspection opinion letter to Dunamu, operator of Upbit exchange, regarding the 2025 $36 million hack. This letter marks the official start of sanctions procedures by financial authorities. The company has the right to respond before final sanctions are imposed.
2Criticism Over Delayed Disclosure
Upbit faced criticism for delaying its announcement of a 54-minute hack until the end of the day in 2026, reportedly to avoid overshadowing a merger event with Naver Financial. Authorities are reviewing whether the exchange violated the Virtual Asset User Protection Act, which lacks direct cybersecurity sanctions.
3Closing Regulatory Gaps
South Korean authorities plan to amend the Digital Asset Basic Act's second phase with sanctions and compensation clauses for hacking incidents. Current regulations don't specify penalties for cyberattacks. This move aims to strengthen oversight in the crypto sector following high-profile breaches.
4User Reimbursements
Following the exploit, Upbit froze $1.5 million in funds and pledged to compensate affected users from its balance sheet. The exchange also revamped its crypto wallet architecture to address vulnerabilities and migrated assets from compromised wallets, demonstrating crisis management efforts.
5Onchain Tracking Innovation
In December 2025, Upbit launched its Onchain AI Tracer System - an automated service to track stolen funds across blockchains. Ranked third by CoinMarketCap based on liquidity and volume metrics, Upbit's recovery tools set a precedent for post-breach responses in crypto exchanges.
6Industry-Wide Implications
This case highlights critical weaknesses in crypto exchanges' cybersecurity and incident response protocols. Closing regulatory loopholes and enhancing transparency measures are vital for restoring trust. Upbit's security overhaul may serve as a benchmark for other platforms facing similar threats.