
律动BlockBeats|Nov 27, 2025 04:15
History of theft on South Korean cryptocurrency platforms: Upbit was once hacked by North Korean hackers for 342000 ETH, and Bithumb has also been hacked multiple times
According to BlockBeats, on November 27th, Upbit, the largest cryptocurrency trading platform in South Korea, was attacked today and was also hacked by a hot wallet on November 27th, 2019. 342000 ETH were transferred to an unknown address, worth approximately $50 million, and the mastermind behind it is suspected to be the North Korean hacker group Lazarus Group. After the theft, Upbit fully compensated the user with its own funds and suspended trading for two weeks, then increased the cold wallet asset storage ratio to 70%.
Upbit disclosed this morning that abnormal withdrawal behavior was detected at 4:42 am, and approximately 54 billion Korean won (approximately 36 million US dollars) of Solana network related digital assets were transferred to an unknown external wallet address. Upbit will bear all customer losses and has suspended Solana network asset deposits and withdrawals. The stolen assets include tokens such as 2Z, ACS, BONK, DOOD, TRUMP, USDC, and W.
It is worth noting that Naver, the largest portal website in South Korea, agreed yesterday to acquire Dunamu, the operator of Upbit, the country's largest cryptocurrency trading platform, through an all stock transaction, with a valuation of approximately $10.3 billion.
The second largest cryptocurrency trading platform in South Korea, Bithumb, has also been hacked multiple times. In February 2017, unknown hackers invaded its employees' computers, stole user data, and transferred approximately $7 million in assets. Some of Bithumb's user data was leaked, leading to subsequent phishing attacks. In June of the same year, employee computers were hacked again, and the personal information of 31000 users was leaked, resulting in a loss of approximately $1 million in subsequent fund theft.
On June 20, 2018, the Bithumb hot wallet was hacked, and approximately $32 million in assets were stolen. The hacker is suspected to be the North Korean Lazarus Group. Bithumb suspends trading and transfers assets to a cold wallet, compensating users with half of their funds and recovering the other half of the stolen funds.
On March 29, 2019, Bithumb's hot wallet experienced abnormal withdrawals, with EOS and XRP being transferred and suspected of internal assistance, resulting in a loss of approximately $19 million. Bithumb fully compensates users and triggers South Korean police investigation.