342,000 ether stolen in Upbit hack
In 2019, 342,000 ether, worth about 58 billion won at the time, were stolen from Upbit. In November 2024, police announced the results of their investigation, concluding that the North Korean hacking groups Lazarus and Andariel were responsible. Some of the assets were recovered through cooperation with Switzerland.
Key facts
- Affected organisation
- Upbit
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- 342,000 ether, worth about 58 billion won at the time
- Cause / method
- Hacking by North Korean hacking groups Lazarus and Andariel
- Location
- South Korea
If your data was exposed
Exposed dataCrypto assets
- Check login and withdrawal history in your exchange app, and turn on withdrawal address whitelisting and withdrawal delays.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- Police announced investigation results attributing the 2019 theft of ether from Upbit to North Korea's Lazarus and Andariel, along with the recovery of some assets through cooperation with Switzerland.
4 related reports
Other incidents at Upbit
Upbit hack causes 44.5 billion won in losses
Impact: 44.5 billion won
Upbit, operated by Dunamu, suffered a hack causing 44.5 billion won in losses. Dunamu moved to respond to the cyber intrusion incident. The Financial Supervisory Service completed its inspection of the incident and sent an inspection opinion to Dunamu, launching sanction proceedings.
Related reports: 7 · last report →Upbit hack leads to abnormal withdrawal of 44.5 billion won in crypto
Impact: 44.5 billion won in virtual assets
In November 2025, a hack at Upbit led to the abnormal withdrawal of 44.5 billion won in virtual assets. Upbit suspended deposits and withdrawals and said it would fully cover the affected assets, while financial authorities launched an on-site inspection. Upbit later froze 2.6 billion won of the stolen assets using its in-house on-chain tracking system, and in June 2026 it was confirmed that the company had paid 790 million won in compensation related to the hack.
Related reports: 49 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.