Upbit will resume digital asset deposits and withdrawals on December 1 at 1:00 PM KST following a $37 million hack that focused Solana-based property.
The South Korean alternate introduced that each one present deposit addresses have been deleted, and customers should situation new addresses earlier than depositing funds.
The safety breach occurred on November 27, 2025, when hackers stole roughly 44.5 billion KRW ($30-36 million USD) from Upbit’s sizzling wallets.
In contrast to the 2019 assault which targeted on Ethereum (ETH), the most recent incident focused Solana ecosystem tokens together with Solana (SOL), USDC, and Bonk (BONK). North Korea’s Lazarus Group is suspected of planning the assault.
New deposit addresses required for all customers
Upbit warned that utilizing outdated deposit addresses may lead to delays. “Attributable to safety vulnerability enhancements and pockets system upkeep, new deposit addresses for all digital property are required,” the alternate acknowledged in its announcement.
The alternate instructed customers to delete any present Upbit deposit addresses registered in private wallets or different exchanges to forestall future misuse.
Deposits made throughout the suspension interval can be proven sequentially as soon as providers resume. Nevertheless, they talked about that processing could take additional time.
Withdrawals and deposits will resume in phases, beginning with community digital property which have accomplished pockets system inspections and confirmed safety.
Staking requests and NFT deposits supported by resumed networks can be processed after service stability is verified.
Alternate covers all person losses from company reserves
Upbit pledged 100% protection of person losses from its company reserves. The alternate instantly halted all deposits and withdrawals upon detecting the unauthorized transfers on November 27.
The corporate efficiently labored with token foundations to freeze roughly $8.18 million value of particular tokens like LAYER, making them nugatory to attackers. The frozen property signify roughly 22% of the full stolen quantity.
Customers ought to be aware potential worth variations that occurred throughout the suspension interval. For digital property paid by means of airdrops, property with ended buying and selling help, or watchlist-designated tokens, solely withdrawals will resume.
Belongings that have been suspended for separate causes earlier than the inspection could stay unavailable till these points are resolved.
