Briefly
Upbit mentioned irregular transfers on the Solana community drained about $36 million throughout a number of tokens, together with BONK, JTO, SONIC, and USDC.
The trade moved remaining funds offline and is coordinating on-chain freezes with issuers after securing a portion of Solayer tokens.
The CEO of Dunamu, Upbit’s mum or dad, mentioned the trade will totally reimburse prospects.
South Korea’s largest crypto trade, Upbit, disclosed a safety incident involving belongings on the Solana community on Thursday, reporting losses of roughly $36 million because the platform moved to include the breach.
The trade mentioned it detected irregular withdrawals linked to a compromised hot-wallet handle, prompting it to halt some companies whereas investigators traced the stream of funds.
“At round 04:42 on 2025-11-27, Upbit confirmed {that a} portion of Solana community belongings (roughly 54 billion KRW price) had been transferred to a pockets handle not designated internally (an unknown exterior pockets),” a tough translation of Dunamu CEO Oh Kyung-seok’s public discover reads.
Affected belongings embody meme cash similar to Bonk (BONK), Moodeng (MOODENG), Official Trump (TRUMP), and decentralized finance tokens similar to Sonic SVM (SONIC), Entry Protocol (ACS), Jito (JTO), Solana (SOL), and Raydium (RAY), amongst different tokens similar to Pudgy Penguin (PENGU). The record additionally consists of Circle’s USD Coin (USDC).
“The size of the loss attributable to the irregular withdrawals was recognized internally instantly upon affirmation,” Oh mentioned, including that Upbit will “totally compensate all the quantity with its personal belongings in order that no influence happens to members’ belongings.”
Upbit mentioned it has initiated an emergency safety evaluate of all associated networks and pockets techniques instantly after detecting the irregular transfers.
Per Oh’s discover, the trade moved all remaining belongings into chilly storage to forestall extra irregular withdrawals, and it’s coordinating on-chain freeze makes an attempt with related initiatives after efficiently freezing a portion of Solayer (LAYER).
Upbit added that broader deposit and withdrawal companies will resume solely after systemwide safety checks are accomplished.
The suspected hack comes as Dunamu, Upbit’s mum or dad firm, has been navigating one among its most consequential company transitions in years, with the agency set to be absorbed into Naver Monetary underneath a $10.3 billion stock-swap settlement.
Decrypt reached out to Dunamu for remark. This can be a growing story.
Every day Debrief E-newsletter
Begin on daily basis with the highest information tales proper now, plus unique options, a podcast, movies and extra.
