South Korean exchange Upbit has experienced a major security breach involving 54 billion wons in Solana assets, approximately $37 million transferred to an unauthorized wallet. Client funds are reportedly safe, with full compensation promised from the platform's reserves. This incident highlights critical concerns about the ongoing vulnerability of centralized crypto infrastructures.
Upbit, one of Asia’s highest-volume exchange platforms, has confirmed it was victim of a hack targeting its crypto wallets dedicated to Solana-based assets. The incident was initially detected by PeckShield, a blockchain security firm recognized for its ability to trace suspicious fund movements in real time. According to initial reports, nearly 54 billion South Korean won were siphoned to an unidentified external address.
Upbit’s response was relatively swift. The exchange immediately proceeded to secure the compromised wallets and published a statement reassuring its users. The platform states that this loss will be entirely absorbed by its own reserves, with no impact on client balances. This approach echoes that adopted during other major industry incidents. Where some platforms chose to socialize losses while others, like Upbit, directly assume the cost of the breach.
PeckShield played a decisive role in the early identification of this violation. The cybersecurity firm, experienced in on-chain analysis, spotted abnormal transfers involving Solana tokens from Upbit’s hot wallets. Analysts noticed that the funds were moved in several closely-timed transactions. A classic signature of automated attacks or private key compromises.
This type of breach raises major technical questions. How did the attackers manage to access the hot wallets without triggering alert systems earlier? Exchanges typically use multi-signature mechanisms and progressive withdrawal controls to limit exposure. Yet, in this specific case, the hackers appear to have circumvented these safeguards with formidable efficiency.
The Solana blockchain, despite its speed and low transaction costs, also presents specific characteristics in terms of wallet management and security. Unlike Ethereum where custody solutions are more mature and diversified, the Solana ecosystem is still developing on certain security aspects. This attack could therefore highlight vulnerabilities specific to the technical infrastructure used by Upbit to manage its SPL assets.
Store your Solana tokens on cold wallets to protect yourself against attacks. This is the ideal opportunity since Ledger is offering 50% discounts and up to $90 of BTC for any Ledger purchase with our exclusive Black Friday offer:
Faced with this incident, Upbit opted for transparent and reassuring communication. The exchange clearly stated that members’ assets will not be affected, a crucial commitment to preserve user confidence. This decision to fully cover the loss with its own funds demonstrates solid financial health and a responsible approach to risk management.
Historically, Upbit had already been the victim of a major hack in 2019, where 342,000 ETH were stolen, worth approximately $50 million at the time. The platform had also reimbursed its users then, strengthening its reputation for reliability. This new attack, although significant, remains lower in absolute value, but it occurs in a context where the security of centralized exchanges is closely scrutinized by regulators and the community.
Upbit’s teams announced the launch of an in-depth investigation in collaboration with South Korean authorities and blockchain security partners. The objective is twofold: identify the attack vectors used and strengthen existing security protocols. Investigations could also focus on the traceability of stolen funds, with the hope of freezing part of the assets through collaborations with other exchanges and Solana development teams.
Related articles:
Charles Ledoux is a Bitcoin and blockchain technology specialist. A graduate of the Crypto Academy, he has been a Bitcoin miner for over a year. He has written numerous masterclasses to educate newcomers to the industry and has authored over 2,000 articles on cryptocurrency. Now, he aims to share his passion for crypto through his articles for InvestX.
DISCLAIMER
This article is for informational purposes only and should not be considered as investment advice. Trading cryptocurrencies involves risks, and it is important not to invest more than you can afford to lose.
InvestX is not responsible for the quality of the products or services presented on this page and cannot be held liable, directly or indirectly, for any damage or loss caused by the use of any product or service featured in this article. Investments in crypto assets are inherently risky; readers should conduct their own research before taking any action and invest only within their financial means. This article does not constitute investment advice.
Risk Warning : Trading financial instruments and/or cryptocurrencies carries a high level of risk, including the possibility of losing all or part of your investment. It may not be suitable for all investors. Cryptocurrency prices are highly volatile and can be influenced by external factors such as financial, regulatory, or political events. Margin trading increases financial risks.
CFDs (Contracts for Difference) are complex instruments with a high risk of rapid capital loss due to leverage. Between 74% and 89% of retail investor accounts lose money when trading CFDs. You should assess whether you understand how CFDs work and whether you can afford to take the high risk of losing your money.
Before engaging in financial or cryptocurrency trading, you must be fully informed about the associated risks and fees, carefully evaluate your investment objectives, level of experience, and risk tolerance, and seek professional advice if needed. InvestX.fr and the InvestX application may provide general market commentary, which does not constitute investment advice and should not be interpreted as such. Please consult an independent financial advisor for any investment-related questions. InvestX.fr disclaims any liability for errors, misinvestments, inaccuracies, or omissions and does not guarantee the accuracy or completeness of the information, texts, graphics, links, or other materials provided.
Some of the partners featured on this site may not be regulated in your country. It is your responsibility to verify the compliance of these services with local regulations before using them.
