South Korea’s biggest crypto exchange woke up to trouble early Thursday after a 4:42 a.m. breach pushed millions in Solana-based tokens out to an unknown wallet.

But instead of panic, Upbit moved fast – freezing its systems, shutting down deposits and withdrawals, and telling customers one thing that instantly mattered most: Upbit will cover the full 54 billion won loss.

A Sudden Outflow on the Solana Network

Upbit detected “abnormal withdrawal activity” involving 24 Solana-ecosystem tokens, including SOL, USDC, BONK, RENDER, ORCA, JUP, PYTH, IO and others. All were transferred to a wallet the exchange did not recognize.

CEO Oh Kyung-seok addressed users directly, saying Upbit is “prioritizing the protection of member assets” and repeating that the entire amount “will be covered by Upbit’s holdings.”

The exchange wanted users to know their balances weren’t on the line.

Systems Frozen, Assets Moved to Cold Storage

By 8:55 a.m., Upbit halted all deposits and withdrawals. The exchange then shifted assets into cold storage and launched a full review of its infrastructure.

On-chain, the team moved just as quickly. Upbit said it managed to freeze roughly 12 billion won worth of Solaire (LAYER) and is still tracking the remaining stolen tokens. It also confirmed it’s working with relevant projects and will cooperate with investigative authorities.

A Flashback to 2019?

The timing adds a strange twist: this hack landed almost exactly six years after Upbit’s major 2019 breach, when 342,000 ETH vanished in an attack later linked to North Korea. That older case still hangs over the exchange, especially now that the stolen ETH is worth over $1 billion.

This new incident doesn’t appear connected, but the coincidence won’t go unnoticed.

A Hack During a High-Stakes Moment

The breach also comes as Naver is reportedly preparing a multibillion-dollar stock-swap acquisition of Dunamu, Upbit’s parent company, which is a deal that could eventually set the stage for a Nasdaq listing.

A security scare at a moment like this raises the pressure, but Upbit’s decision to absorb the entire loss may help steady confidence.

Users Safe, But the Investigation Isn’t Over

For now, you can be reassured: no user funds were touched.

Upbit says services will reopen gradually once its security checks are complete. The on-chain chase continues, but the exchange is betting that quick action, transparency, and taking the full financial hit will keep trust intact.

Trust with CoinPedia:

CoinPedia has been delivering accurate and timely cryptocurrency and blockchain updates since 2017. All content is created by our expert panel of analysts and journalists, following strict Editorial Guidelines based on E-E-A-T (Experience, Expertise, Authoritativeness, Trustworthiness). Every article is fact-checked against reputable sources to ensure accuracy, transparency, and reliability. Our review policy guarantees unbiased evaluations when recommending exchanges, platforms, or tools. We strive to provide timely updates about everything crypto & blockchain, right from startups to industry majors.

Investment Disclaimer:

All opinions and insights shared represent the author’s own views on current market conditions. Please do your own research before making investment decisions. Neither the writer nor the publication assumes responsibility for your financial choices.

Sponsored and Advertisements:

Sponsored content and affiliate links may appear on our site. Advertisements are marked clearly, and our editorial content remains entirely independent from our ad partners.