Upbit will resume digital asset deposits and withdrawals on December 1 at 1:00 PM KST following a $37 million hack that focused Solana-based property.
The South Korean trade introduced that every one current deposit addresses have been deleted, and customers should subject new addresses earlier than depositing funds.
The safety breach occurred on November 27, 2025, when hackers stole roughly 44.5 billion KRW ($30-36 million USD) from Upbit’s scorching wallets.
In contrast to the 2019 assault which centered on Ethereum (ETH), the most recent incident focused Solana ecosystem tokens together with Solana (SOL), USDC, and Bonk (BONK). North Korea’s Lazarus Group is suspected of planning the assault.
New deposit addresses required for all customers
Upbit warned that utilizing previous deposit addresses may lead to delays. “As a result of safety vulnerability enhancements and pockets system upkeep, new deposit addresses for all digital property are required,” the trade acknowledged in its announcement.
The trade instructed customers to delete any current Upbit deposit addresses registered in private wallets or different exchanges to stop future misuse.
Deposits made through the suspension interval can be proven sequentially as soon as companies resume. Nevertheless, they talked about that processing could take additional time.
Withdrawals and deposits will resume in phases, beginning with community digital property which have accomplished pockets system inspections and confirmed safety.
Staking requests and NFT deposits supported by resumed networks can be processed after service stability is verified.
Change covers all person losses from company reserves
Upbit pledged 100% protection of person losses from its company reserves. The trade instantly halted all deposits and withdrawals upon detecting the unauthorized transfers on November 27.
The corporate efficiently labored with token foundations to freeze roughly $8.18 million value of particular tokens like LAYER, making them nugatory to attackers. The frozen property symbolize roughly 22% of the full stolen quantity.
Customers ought to word potential worth variations that occurred through the suspension interval. For digital property paid by means of airdrops, property with ended buying and selling help, or watchlist-designated tokens, solely withdrawals will resume.
Belongings that have been suspended for separate causes earlier than the inspection could stay unavailable till these points are resolved.
