Analysis: Upbit May Be Under Long-Term Infiltration by Advanced Persistent Threat (APT) Groups Security firm GoPlus analyzed that the recent Upbit attack has raised some serious concerns: the hot wallet breach points to vulnerabilities in key management and security risks within the internal network. The cold wallet remains secure. Key highlights of this incident: 1. 'Anniversary Attack' — The attack date coincides with the $50 million hacking incident in 2019 (6 years ago) on the same day; 2. Strategic timing — The attack occurred just hours after the major merger announcement between Dunamu and Naver; 3. Typical Lazarus Group characteristics — Speed, techniques, and symbolic significance of the attack; 4. Sophisticated money laundering methods — Routed through multiple DEXs, potentially posing regulatory evasion risks (2,200 SOL tokens transferred to Binance). All signs suggest that the platform may be under long-term infiltration by Advanced Persistent Threat (APT) groups.