upbit

South Korea’s largest crypto exchange is still working to recover from this week’s major security incident, but new findings point to a deep-rooted flaw inside its own wallet system. Upbit revealed that it identified and patched a critical vulnerability during its probe into the $30 million exploit — a weakness that allowed attackers to analyze wallet signatures in a way that should never be possible on a blockchain network.

A Rare Wallet Bug That Exposed Predictable Signature Patterns
Upbit CEO Oh Kyung-seok confirmed that investigators found a defect in the exchange’s internal wallet software. Under specific conditions, the system generated weak signature data, creating predictable patterns in past transactions. Although private keys are normally mathematically impossible to derive from blockchain activity, these patterns could have revealed portions of certain keys through advanced cryptographic analysis.
The vulnerability was detected only after Upbit launched a full system-wide audit on November 27, following irregular withdrawals of Solana-ecosystem tokens. The review covered networks, wallet architecture, signing mechanisms and security infrastructure. The company immediately fixed the flaw, shut down deposits and withdrawals, and began an emergency rebuild of its wallet systems.
Upbit confirmed total losses of roughly 44.5 billion KRW (~$30 million). Customer assets accounted for 38.6 billion KRW (~$26 million), and the exchange has already frozen about 2.3 billion KRW (~$1.5 million) linked to suspicious transactions.

Expanded Investigations and Ongoing Infrastructure Repairs
Upbit said it is conducting an enhanced internal review and will reimburse all customer losses using its own reserves. Services will fully reopen once the platform completes a final inspection of all wallet systems.
The breach forced Upbit to suspend withdrawals on November 26 after detecting irregular activity involving SOL, ORCA, RAY, JUP and several other Solana-based assets. Remaining funds were quickly transferred to cold storage while engineers began rebuilding parts of the wallet infrastructure.
Upbit, operated by fintech firm Dunamu, remains South Korea’s largest crypto exchange by trading volume. Dunamu is preparing for a merger with Naver ahead of a public listing, and the company stated that the security incident has not affected those plans.
South Korean authorities have launched their own investigation, reviewing both the unauthorized withdrawals and the wallet vulnerability disclosed by the exchange.

#Upbit , #CryptoHack , #BlockchainSecurity , #DigitalAssets , #CryptoNews

Stay one step ahead – follow our profile and stay informed about everything important in the world of cryptocurrencies!
Notice:
,,The information and views presented in this article are intended solely for educational purposes and should not be taken as investment advice in any situation. The content of these pages should not be regarded as financial, investment, or any other form of advice. We caution that investing in cryptocurrencies can be risky and may lead to financial losses.“

UPBIT: Their SOLANA network was hacked for 54 billion KRW and they will compensate for all damages to customers.
UPBIT revealed in a blog post that their Solana network was attacked, resulting in a loss of 54.00 billion Korean won (36.00 million dollars). UPBIT stated that they will bear the losses incurred to all customers due to this hacking incident.
#Upbit #hack