South Korea to Permit Crypto Withdrawal Freezes During Hacking Threats
Regulators allow preventive service suspensions to mitigate potential cyberattack risks for crypto exchanges.
1New Regulatory Flexibility
South Korea’s Financial Services Commission is shifting its policy to allow cryptocurrency exchanges to freeze deposits and withdrawals during suspected hacking attempts. Previously, platforms were restricted from blocking user funds unless a breach was definitively confirmed. This change aims to prioritize asset protection over strict adherence to rigid service availability requirements.
2Operational Security Mandates
The regulator is demanding that exchanges implement round-the-clock monitoring and robust incident response protocols. Firms unable to maintain continuous oversight must limit transaction processing to staffed hours and provide advance notice to their users. These measures are designed to reduce the window of opportunity for attackers during potential security compromises.
3Increased Reserve Requirements
Beyond immediate suspension powers, the Financial Services Commission is pushing for higher cold-wallet holdings across the industry. Exchanges are also expected to bolster their insurance coverage and financial reserves to better withstand potential losses. These requirements serve as a secondary defense layer to protect consumer assets in the event of breaches.
4Recent Security Incidents
The policy shift follows notable security scares involving local platforms. On October 24, the trading platform Prabang suffered a loss of approximately $70,000 due to abnormal hot-wallet withdrawals. Additionally, the exchange GOPAX recently suspended services after receiving a hacking threat, though representatives later confirmed that no actual breach had occurred during that period.
5Systemic Vulnerability Assessment
A recent nationwide review conducted in October revealed significant cybersecurity deficiencies at 130 out of 555 financial companies. The Financial Services Commission specifically identified 16 firms, including GOPAX operator Streami and Prabang, as having been involved in previous security incidents. This data underscores the urgent need for the newly proposed regulatory oversight.
6Preventive Suspension Mechanism
The regulator plans to issue a no-action letter that permits preventive suspensions under specific, predefined conditions. This legal mechanism provides exchanges with the necessary cover to act quickly without fear of regulatory reprisal for service interruptions. By moving from reactive to proactive measures, the commission hopes to minimize total financial impact.
7Industry Compliance Pressure
Exchanges operating within South Korea must now align their internal protocols with these updated security expectations. The shift forces companies to invest more heavily in their technical infrastructure and personnel to maintain continuous monitoring capabilities. Those failing to meet these standards face increased scrutiny and potential operational limitations imposed by the government.
8Broader Regulatory Context
This move represents a broader effort by South Korean authorities to stabilize the domestic crypto market through stricter governance. While lawmakers simultaneously debate delaying crypto tax implementation until 2029, the focus on immediate security remains a priority. These combined actions reflect a government strategy to balance innovation with necessary investor protection frameworks.