Now Hacked
EN-GB
Hacking & intrusion

Upbit hack leads to abnormal withdrawal of 44.5 billion won in crypto

First reported · Last reported · 49 related reports

In November 2025, a hack at Upbit led to the abnormal withdrawal of 44.5 billion won in virtual assets. Upbit suspended deposits and withdrawals and said it would fully cover the affected assets, while financial authorities launched an on-site inspection. Upbit later froze 2.6 billion won of the stolen assets using its in-house on-chain tracking system, and in June 2026 it was confirmed that the company had paid 790 million won in compensation related to the hack.

Key facts

Affected organisation
Upbit
Incident type
Hacking & intrusion
Occurred / detected
Not confirmed
Scale of damage
44.5 billion won in virtual assets
Cause / method
Abnormal withdrawal of virtual assets due to hacking
Location
South Korea

If your data was exposed

Exposed dataCrypto assets

  1. Check login and withdrawal history in your exchange app, and turn on withdrawal address whitelisting and withdrawal delays.
  2. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Timeline

  1. Upbit disclosed a hacking incident worth 44.5 billion won and pledged full compensation.
  2. With Upbit deposits and withdrawals suspended, financial authorities launched an on-site inspection.
  3. Authorities named North Korea's Lazarus as the likely culprit behind the hack.
  4. Upbit froze 2.6 billion won of the stolen assets using its in-house on-chain tracking system.
  5. It was confirmed that Upbit had paid 790 million won in compensation related to the hack.

49 related reports

  • Hacking & intrusionUpbit

    Upbit hack causes 44.5 billion won in losses

    Impact: 44.5 billion won

    Upbit, operated by Dunamu, suffered a hack causing 44.5 billion won in losses. Dunamu moved to respond to the cyber intrusion incident. The Financial Supervisory Service completed its inspection of the incident and sent an inspection opinion to Dunamu, launching sanction proceedings.

    Related reports: 7 · last report →
  • Hacking & intrusionUpbit

    342,000 ether stolen in Upbit hack

    Impact: 342,000 ether, worth about 58 billion won at the time

    In 2019, 342,000 ether, worth about 58 billion won at the time, were stolen from Upbit. In November 2024, police announced the results of their investigation, concluding that the North Korean hacking groups Lazarus and Andariel were responsible. Some of the assets were recovered through cooperation with Switzerland.

    Related reports: 4 · last report →

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.