Denne siden er kun til informasjonsformål. Enkelte tjenester og funksjoner er kanskje ikke tilgjengelige i din jurisdiksjon.

Solana, Upbit Network Breach: $36M Hack, Response, and Implications

News FeederNews Feeder
Publisert 27. nov. 2025
Oppdaterte den 27. nov. 2025
5min lest
JUP+2,23 %
SOL+7,44 %

Overview of the $36 Million Solana-Based Asset Breach at Upbit

On November 27, 2025, South Korea's largest cryptocurrency exchange, Upbit, experienced a significant security breach involving Solana-based assets. The hack resulted in the theft of approximately $36 million worth of tokens, marking a critical moment for both Upbit and the Solana network. This incident has raised concerns about the vulnerabilities of hot wallet systems and the broader implications for exchange security practices.

The breach was detected at 4:42 a.m. KST, with abnormal withdrawals targeting Upbit's hot wallet infrastructure. The stolen funds included multiple tokens from the Solana ecosystem, such as SOL, USDC, BONK, JUP, RAY, ORCA, and PYTH. This article explores the details of the breach, Upbit's response, and its implications for the cryptocurrency industry.

Tokens Affected by the Hack

The breach specifically targeted Solana-based assets, affecting a range of tokens within the ecosystem. The stolen tokens included:

  • SOL (Solana's native token)

  • USDC (a widely used stablecoin)

  • BONK (a meme token)

  • JUP (Jupiter token)

  • RAY (Raydium token)

  • ORCA (Orca token)

  • PYTH (Pyth Network token)

These tokens represent a diverse cross-section of the Solana ecosystem, highlighting the scale and impact of the breach on the network.

Upbit's Immediate Response Measures

In the wake of the breach, Upbit implemented swift measures to mitigate further losses and protect user funds. Key actions included:

  • Suspension of Deposits and Withdrawals: Upbit immediately halted all deposits and withdrawals for Solana-based assets to prevent additional unauthorized transactions.

  • Cold Wallet Transfers: The exchange transferred the remaining funds from its hot wallets to cold wallets, which are offline and less vulnerable to hacking attempts.

  • User Compensation Commitment: Upbit pledged to fully compensate affected users using its own reserves, ensuring that customer balances remained unaffected.

  • On-Chain Freezing Efforts: Collaborating with blockchain analytics firms and project teams, Upbit successfully froze approximately $8–9 million of the stolen funds. The remaining funds are under active monitoring.

These actions underscore Upbit's commitment to safeguarding user assets and maintaining trust within the cryptocurrency community.

Historical Context: Upbit's Previous Hacks

This is not the first time Upbit has faced a major security breach. In 2019, the exchange lost 342,000 ETH (worth $50 million at the time) in a hack attributed to North Korean groups. The 2025 Solana-based asset breach draws parallels to the earlier incident, highlighting ongoing challenges in securing exchange infrastructure.

While Upbit has since implemented enhanced security measures, the recurrence of such incidents underscores the persistent vulnerabilities in the cryptocurrency space.

Vulnerabilities in Hot Wallet Infrastructure and Solana Network Security

The breach has brought attention to the inherent risks associated with hot wallet systems, particularly on high-throughput networks like Solana. Hot wallets, which are connected to the internet, are more susceptible to hacking attempts compared to cold wallets.

Solana's unique network features, such as its Proof of History (PoH) consensus mechanism, enable high transaction speeds and scalability. However, these same features may also introduce specific vulnerabilities that hackers can exploit. The incident serves as a reminder of the need for robust security measures tailored to the unique characteristics of each blockchain network.

Corporate Developments at Dunamu and the Timing of the Breach

The breach coincided with a significant corporate transition for Upbit's parent company, Dunamu. At the time of the hack, Dunamu was in the process of merging with Naver Financial in a $10.3 billion stock-swap deal. This timing has raised questions about potential reputational risks and the impact of the breach on the merger.

While the merger represents a strategic move for Dunamu, the security incident highlights the challenges of managing operational risks during periods of corporate change.

Broader Implications for Solana's Ecosystem and Exchange Security Practices

The Upbit breach has far-reaching implications for both the Solana ecosystem and the broader cryptocurrency industry. Key takeaways include:

  • Exchange Security Practices: The incident underscores the importance of robust security protocols, particularly for hot wallet systems. Exchanges must continually adapt to evolving threats to protect user funds.

  • Solana Ecosystem Trust: The breach may impact user confidence in Solana-based assets, emphasizing the need for enhanced security measures within the network.

  • Regulatory Challenges: The incident highlights the regulatory and security challenges facing the South Korean crypto market, where exchanges are under increasing scrutiny.

  • User Education: Educating users about the risks associated with hot wallets and the importance of personal security measures is crucial for fostering trust in the cryptocurrency space.

Conclusion

The $36 million Solana-based asset breach at Upbit serves as a stark reminder of the vulnerabilities within the cryptocurrency industry. While Upbit's swift response and commitment to user compensation have mitigated some of the immediate impacts, the incident raises important questions about exchange security, network vulnerabilities, and the broader implications for the Solana ecosystem.

As the industry continues to evolve, addressing these challenges will be critical to ensuring the long-term growth and stability of the cryptocurrency market.

Ansvarsfraskrivelse
Dette innholdet leveres kun til informasjonsformål og kan omhandle produkter som ikke er tilgjengelige i din region. Det er ikke ment å utgjøre (i) investeringsrådgivning eller en investeringsanbefaling, (ii) et tilbud eller en oppfordring til å kjøpe, selge eller hold krypto/digitale aktiva, eller (iii) finansiell, regnskapsmessig, juridisk eller skattemessig rådgivning. Holding av krypto/digitale aktiva, inkludert stablecoins, innebærer en høy grad av risiko og kan svinge betydelig. Du bør nøye vurdere om trading eller holding av krypto/digitale aktiva er egnet for deg i lys av din økonomiske situasjon. Ta kontakt med din juridiske/skattemessige/investeringsrådgiver for spørsmål om dine spesifikke omstendigheter. Informasjon (inkludert markedsdata og statistisk informasjon, om noen) som fremgår av dette innlegget er kun for generelle informasjonsformål. Selv om det er utvist all rimelig aktsomhet ved utarbeidelsen av disse dataene og grafene, påtas det intet ansvar for eventuelle faktafeil eller utelatelser som er kommet til uttrykk her.

Digitale aktiva er utsatt for volatilitet og er ikke forsikret. Ikke finansiell/investeringsrådgivning. Ikke alle produkter og tjenester tilbys i alle regioner. Unntak og vilkår og betingelser gjelder.

© 2026 OKX. Denne artikkelen kan gjengis eller distribueres i sin helhet, eller utdrag på 100 ord eller mindre av denne artikkelen kan brukes, forutsatt at slik bruk er ikke-kommersiell. Enhver gjengivelse eller distribusjon av hele artikkelen må også tydelig angi: «Denne artikkelen er © 2026 OKX og brukes med tillatelse.» Tillatte utdrag må sitere navnet på artikkelen og inkludere kildehenvisning, for eksempel «Artikkelnavn, [forfatternavn hvis aktuelt], © 2026 OKX.» Noe innhold kan være generert eller assistert av verktøy for kunstig intelligens (AI). Ingen bearbeidelser eller annen bruk av denne artikkelen er tillatt.