• Upbit suffered a ₩54B ($37M) Solana hot-wallet breach, forcing an immediate halt to Solana deposits and withdrawals.
• The incident hit hours after Naver announced its acquisition of Dunamu, overshadowing one of Korea’s biggest digital-asset deals.
• Upbit says it will fully reimburse all user losses, while regulators intensify scrutiny amid an already tense compliance environment.

South Korea’s largest crypto exchange, Upbit, halted Solana deposits and withdrawals on Wednesday after detecting unauthorized transactions draining roughly ₩54 billion (about $37 million) from one of its operational wallets. The Upbit hack, which the exchange described as an “abnormal withdrawal activity” incident, forced the immediate freeze of Solana-network services. It also triggered a wider migration of assets into cold storage.

The breach landed at a highly sensitive moment. Just hours earlier, Naver Financial announced a stock-swap acquisition of Dunamu, Upbit’s parent company. The deal would fold South Korea’s largest crypto platform into one of the country’s most powerful tech conglomerates. Instead of dominating the news cycle, the merger was eclipsed by the exchange’s latest security failure.

A Hot-Wallet Breach Limited to Solana Assets

Upbit said the incident was contained to a single Solana hot wallet. The wallet handled daily operational flows such as customer withdrawals. The exchange confirmed that it immediately transferred all remaining Solana tokens from the wallet to cold storage after detecting the breach.

A preliminary review shows that the attackers siphoned off a wide mix of assets. These included majors like SOL and USDC, ecosystem tokens such as JUP, RAY, RENDER, ORCA and PYTH, and high-volume memecoins that trade heavily on Korean exchanges. Among them were BONK, TRUMP, MOODENG and smaller Solana-native tokens. The list aligns with on-chain tracking performed by multiple analytics firms. It also reflects user queries about which tokens were stolen in the Upbit hack.

Upbit stressed that no other networks were affected. It also said the intrusion did not compromise cold wallets, which hold the majority of customer and corporate assets.

Operational Freeze and User Assurances

Within minutes of identifying the breach, Upbit initiated a full suspension of Solana withdrawals. It also disabled deposits for all Solana-based tokens. The company moved remaining assets from its Solana hot wallet into cold storage and began working with blockchain forensics teams and Korean authorities. Investigators are now tracing the stolen funds. Early indications suggest that portions of the tokens have already been flagged or frozen on-chain.

Most critically for customers, the exchange said it will fully cover the loss using corporate reserves. Upbit emphasized that the incident will not affect user balances and also confirmed that it has reconciled all accounting for the $37M Solana breach.

This assurance is essential for South Korean users, who rely heavily on local exchanges due to the country’s closed capital system rules. Earlier exchange failures in the region, particularly during the 2022–2023 restructuring cycle, have made users wary of platform risk.

A Corporate Megadeal Collides With a Security Crisis

The most damaging aspect of the breach may not be the loss itself. Its proximity to one of the biggest corporate moves in the Korean fintech and digital-asset sector is more significant. The Naver–Dunamu merger, executed via a multibillion-dollar stock swap, aims to position Naver as a major player in blockchain infrastructure, digital identity, tokenization and AI-driven financial services.

Instead of celebrating a milestone that would make Upbit part of the Naver ecosystem, headlines quickly shifted to a security lapse at the very exchange Naver is acquiring. In a country where tech conglomerates shape national strategy, the optics were severe. Hours after one of Korea’s most influential companies announced its entry into digital assets through a high-profile merger, the centerpiece of that acquisition suffered a hot-wallet breach.

The episode complicates Naver’s narrative. The merger was designed to project institutional scale and stability. It was also intended to demonstrate readiness for regulated Web3 services. Instead, the breach revived concerns about operational vulnerabilities.

Six Years After the 2019 Upbit Hack, History Echoes

The incident also revives uncomfortable memories of the 2019 attack on Upbit. In that event, hackers stole 342,000 ETH from the exchange’s hot wallet, worth roughly ₩58 billion at the time. Korean authorities later attributed the breach to North Korea–linked groups.

There is no evidence or attribution yet for the current attack. Even so, the recurrence, ie, similar month, similar wallet tier, similar operational vectors, adds symbolic weight. Korean media quickly noted the six-year parallel. They also pointed out that the new breach arrives just as Upbit is being absorbed into a larger corporate structure.

Regulators Were Already Watching Closely

The timing intersects with an already tense regulatory environment. Upbit recently received a fine from Korea’s FIU and a temporary three-month ban on onboarding new users. The enforcement campaign aims to tighten domestic compliance frameworks. Regulators have also been vocal about hot-wallet risk, exchange liquidity transparency and the need for real-time monitoring tools.

The new incident will likely accelerate discussions over how Korea will regulate exchanges after the Upbit hack. Lawmakers could consider stricter caps on hot-wallet balances and mandatory cyber-insurance requirements. They may also push for expanded oversight of operational security practices. With the incoming Naver–Dunamu consolidation, regulators are likely to ask how the merged entity plans to enforce safety across a larger financial ecosystem.

Market Reaction: Contained and Exchange-Specific

Despite the size of the loss, market reaction across the Solana ecosystem remained contained. SOL traded within a narrow band following the news. The SOL price reaction was muted for an event involving a top Asian exchange.

Memecoins such as BONK, TRUMP and MOODENG saw brief intraday swings. They avoided the kind of cascading sell-offs associated with protocol-level failures. Analysts noted that the impact of Upbit hack on the Solana ecosystem was minimal because the event was clearly exchange-specific. It did not indicate an issue with Solana’s consensus or security model.

This decoupling reflects a growing maturity in crypto markets. Investors increasingly distinguish between operational risks at centralized exchanges and vulnerabilities within blockchain networks.

>>> Read more: Balancer Hack 2025: $128M Exploit Hits DeFi Forks

What Comes Next

Upbit says it will restore Solana transactions once security reviews are complete. It has not provided a specific timeline. Investigators are tracing the stolen funds across multiple addresses. Korean authorities are conducting a formal review of Upbit’s systems and incident response procedures.

Naver now faces an early stress test of an acquisition meant to expand its presence in digital finance and Web3 infrastructure. Regulators, meanwhile, are likely to treat the incident as a catalyst for tighter oversight. And users will ultimately judge Upbit on one metric only: whether the exchange fully compensates every loss.

The merger may reshape Korea’s digital-asset landscape. Even so, the timing of this breach ensures that the road to integration begins under scrutiny rather than celebration.

The post Upbit Hack Overshadows Naver’s Acquisition of Dunamu as ₩54B Solana Breach Halts Transfers appeared first on CrispyBull.

• Naver Financial is in talks to acquire Dunamu, Upbit’s operator, in a KRW 20T stock-swap merger deal.
• The merger would combine Naver’s fintech services with Korea’s largest crypto exchange, creating the first real challenger to Kakao.
• Strong Upbit profits and Dunamu’s scale support the deal, which could also revive Dunamu’s Nasdaq ambitions.

Naver Financial is in advanced discussions to acquire Dunamu, the operator of Korea’s largest cryptocurrency exchange Upbit. The potential stock-swap deal is estimated at around KRW 20 trillion. If finalized, the transaction would merge Naver’s payments and digital-banking ecosystem with the country’s dominant crypto-trading platform, creating one of the most influential fintech conglomerates in South Korea.

Reports from Korean and industry media describe the Naver–Dunamu merger as a potential turning point in the country’s financial technology sector. Naver is seeking a stronger role in digital finance to compete more directly with Kakao. At the same time, Dunamu would gain the institutional scale and governance advantages of a major technology parent company.

Inside the Proposed KRW 20T Stock-Swap Deal

Sources indicate the negotiations center on a stock-swap structure rather than a cash acquisition. That would allow Naver Financial to integrate Dunamu without immediate liquidity pressure. The talks remain ongoing, but several outlets report that Naver’s board has already scheduled internal reviews of the proposed acquisition.

For Naver, the deal would deepen its foothold in payments, wealth, and digital financial services. For Upbit operator Dunamu, the merger offers an opportunity to operate within a larger corporate framework. This isn’t a minor factor as competition intensifies across the Korean fintech market and as regulatory expectations rise.

A Merger That Could Reshape Korea’s Fintech Market

If completed, the merger would link Naver’s fintech businesses with Upbit’s dominant role in the local crypto market. Analysts say such a merger could significantly strengthen Korea’s position as a regional fintech hub and accelerate consolidation in a market increasingly defined by super-apps and integrated financial ecosystems.

Contextualizing Kakao’s Role

The potential merger also shifts the competitive balance with Kakao, which currently leads Korea’s consumer fintech market through KakaoPay and the fully digital Kakao Bank. Kakao’s dominance in everyday payments and mobile banking has long positioned it as the country’s default financial super-app. A merged Naver–Dunamu company would become the first rival with comparable reach. The combination brings together Naver’s payments network and Dunamu’s digital-asset operations, positioning the group to compete more directly with Kakao.

If completed, the Naver Dunamu merger would mark one of the most significant restructurings in Korea’s fintech market.

Upbit’s Strong Fundamentals Add Momentum

Dunamu’s financial performance has reinforced the strategic logic behind the merger. The company posted $165 million in Q3 profit, marking 300% year-over-year growth. Upbit remains the dominant exchange in Korea by trading volume and user activity. Dunamu maintains a strong revenue base as the industry prepares for more stringent licensing under the country’s emerging regulatory framework.

These fundamentals make the acquisition more attractive for Naver and help sustain market confidence as negotiations progress.

How the Deal Reopens Dunamu’s Long-Stalled Nasdaq Ambitions

A secondary implication of the merger is the renewed attention on Dunamu’s previously paused plans for a U.S. listing. The company explored a Nasdaq IPO in 2021–2022 before shelving the effort amid regulatory uncertainty and market volatility.

Analysts say a successful integration with Naver Financial would improve governance, transparency, and corporate structure. Such conditions typically strengthen the outlook for companies considering an overseas IPO. While not the central focus of the merger, the transaction could make an eventual Upbit Nasdaq listing technically and reputationally more attainable.

>>> Read more: South Korea Crypto Tax Crackdown Targets Cold Wallets

What Comes Next

Naver’s board is expected to continue evaluating the acquisition in the near term. Any final agreement would require regulatory review in Korea, particularly given Upbit’s dominant position in the domestic crypto market. Pending approval, the merger could reshape competitive dynamics across banking, payments, and digital asset services.

If completed, the Naver Financial acquisition of Dunamu would mark one of Korea’s largest fintech deals to date. It seems to usher in a decisive shift toward integrated, large-scale financial platforms capable of competing on both domestic and global stages.

The post Naver in Talks to Acquire Upbit Operator Dunamu in KRW 20T Deal, Reshaping Korea’s Fintech Market appeared first on CrispyBull.

FIU’s Case Against Upbit

The FIU, South Korea’s key financial watchdog, has accused Upbit of failing to properly enforce KYC procedures. They allowed many accounts to operate without adequate identity verification. This lapse has raised concerns over potential illicit financial activities, including money laundering and fraud, prompting the regulator to take decisive action.

According to reports, the FIU is considering suspending Upbit’s operations, potentially barring the exchange from onboarding new customers for up to six months. While existing users would still have access to their accounts, such a penalty could undermine Upbit’s market position and shake investor confidence in the broader crypto industry.

Market Dominance and Competitive Concerns

Upbit’s regulatory troubles extend beyond compliance failures. The Financial Services Commission (FSC) has also launched an investigation into the exchange’s dominant market position. It reportedly controls a substantial share of South Korea’s cryptocurrency trading activity. Additionally, concerns have emerged regarding Upbit’s close ties with K Bank. The banking partner provides fiat on-ramp services for the exchange.

The FSC aims to assess whether Upbit’s market influence stifles competition, potentially leading to unfair advantages over other trading platforms. If regulators determine that Upbit’s business practices create monopolistic conditions, further regulatory measures could follow, reshaping South Korea’s crypto market dynamics.

Potential Impact on South Korea’s Crypto Landscape

The looming Upbit suspension poses a critical threat to the country’s crypto trading ecosystem. As the dominant exchange in South Korea, Upbit’s disruption could lead to liquidity constraints, price volatility, and a shift in trading activity to alternative platforms. Smaller exchanges may experience an influx of new users, but concerns over regulatory crackdowns could dampen overall investor sentiment.

The case against Upbit underscores South Korea’s increasing regulatory focus on cryptocurrency exchanges, signaling stricter enforcement of KYC and AML standards. As authorities seek to strengthen oversight, other crypto platforms operating in the region may face heightened compliance requirements to avoid similar repercussions.

>>> Read more: North Korea Crypto Hackers Undermine the Crypto Ecosystem

Upbit’s regulatory challenges highlight the growing tensions between digital asset exchanges and financial regulators. The FIU’s allegations, combined with the FSC’s scrutiny over market dominance, illustrate the broader concerns surrounding compliance and fair competition in South Korea’s crypto industry. Whether Upbit can navigate these challenges and maintain its leading position remains uncertain. The outcome of this case, however, could set a precedent for the country’s digital asset regulatory framework moving forward.

The post South Korea’s Upbit Faces Regulatory Reckoning: FIU Threatens Suspension Over 700,000 KYC Violations appeared first on CrispyBull.