South Korea’s largest cryptocurrency exchange, Upbit, announced a significant security breach on Thursday morning. The hack resulted in the loss of approximately 5.9 billion won, equivalent to about 4 million USD, from its own assets. Meanwhile, Upbit managed to cover a total loss of 38.6 billion won from its reserves to protect its users’ interests. Due to meticulous blockchain tracking, 2.3 billion won worth of assets were frozen. Authorities are currently investigating the possibility of involvement by the North Korea-linked Lazarus group.
Details of the Hack
The moment Upbit identified the attack causing a loss of 44.5 billion won in assets, they immediately suspended all deposit and withdrawal processes. Oh Kyung-seok, CEO of Dunamu, Upbit’s main partner, reassured users by stating, “We covered all losses with our own funds.” The exchange promptly deployed cybersecurity teams to isolate both internal systems and external network connections after the attack.
With assistance from blockchain analytics companies, tracing operations led to the identification of certain attacker addresses and freezing of 2.3 billion won worth of funds. This rapid response is seen as part of efforts to protect the exchange’s reputation. South Korean financial authorities, on the other hand, reignited discussions on the national cybersecurity threat level following the incident.
Lazarus Group Suspected as Potential Culprit
Investigators suggest that the notorious Lazarus group, known for its global cyber-attacks, could potentially be behind the hack. South Korean investigatory units noted the hacking methods bear similarities to previous operations by the Lazarus group. Particularly, token transfers and wallet redirects within the Solana 
$86 ecosystem reinforced these allegations.
Upbit has faced numerous hack attempts in the past, notably tightening security protocols after a major breach in 2019. Yet, this recent incident underscores that cryptocurrency exchanges remain prime targets, indicating an increasing complexity in threat vectors. According to experts, as decentralized finance infrastructure continues to expand, security investments are now viewed as a necessity rather than a competitive advantage.
The revelation of this attack highlights the cybersecurity vulnerabilities prevalent in the crypto industry. It also demonstrates Upbit’s commitment to user safety through rapid response and loss compensation. Authorities are likely to increase monitoring and regulations to prevent similar incidents in the future.
