Significant Theft at Upbit Crypto Exchange Raises Security Concerns

By Patricia Miller

Nov 28, 2025

1 min read

Upbit's recent theft from its Solana wallet, suspected to involve Lazarus Group, raises concerns about exchange security.

Upbit faces significant challenges after a recent theft from its Solana-network hot wallet. This breach has raised important questions about security in digital asset exchanges. As one of the largest cryptocurrency exchanges in South Korea, Upbit's prompt decision to suspend all deposits and withdrawals reflects the seriousness of the situation. The platform has taken this step after uncovering unauthorized transfers draining substantial funds valued at around 45 billion won, which equals approximately $30.6 million.

Why is Lazarus Group Suspected?

The Lazarus Group, associated with North Korean state-sponsored hacking activities, is under suspicion for orchestrating this theft. Historically, this group has targeted cryptocurrency platforms to finance regime activities, making them a persistent threat to exchange security. Law enforcement authorities are already on-site at Upbit, conducting an investigation to uncover the details of this operation.

What Actions is Upbit Taking?

In response to the theft, Upbit has committed to reimbursing affected users through company-owned assets, aiming to restore trust among its users. By taking proactive measures, Upbit seeks to address not only the immediate repercussions of the breach but also to enhance its security protocols in the future.

Conclusion

This incident serves as a significant reminder for both exchanges and investors to prioritize robust security measures in the cryptocurrency space. As the landscape of digital assets continues to evolve, staying informed about potential risks is crucial for anyone interested in engaging with cryptocurrencies.

Important Notice And Disclaimer

This article does not provide any financial advice and is not a recommendation to deal in any securities or product. Investments may fall in value and an investor may lose some or all of their investment. Past performance is not an indicator of future performance.