Upbit Resolves $38.5M Solana Token Outflow

An in-depth analysis of Upbit’s $38.5 million Solana breach and the immediate actions taken to secure assets and reassure users.

Upbit's $38.5M Solana Breach: Swift Actions and Security Measures

Key Points:

Upbit’s $38.5M Solana breach, swift compensation action.
Immediate freezing of affected assets.
No user losses due to robust reimbursement.

Upbit, South Korea’s largest cryptocurrency exchange, reported an abnormal outflow of approximately $38.5 million from its Solana network hot wallet on November 27, 2025.

The breach underscores ongoing security risks in cryptocurrency exchanges, impacting market trust temporarily, but Upbit’s swift action to reimburse losses could mitigate long-term investor concerns.

South Korea’s largest cryptocurrency exchange, Upbit, experienced a $38.5 million abnormal outflow on the Solana network. The exchange quickly suspended deposits and withdrawals to mitigate further damage and protect users. Immediate action was imperative for containment.

The CEO of Dunamu, Oh Kyung-seok, announced the breach and outlined measures to recover user losses, promising coverage from Upbit’s reserves. This ensured customer funds remained intact. Upbit’s rapid response highlighted their commitment to security.

The unauthorized outflow involved about 24 Solana-based tokens from Upbit’s hot wallet, causing concern in the crypto market. Nonetheless, Upbit’s quick actions, including transferring remaining funds to cold wallets, helped stabilize the situation.

The breach positioned Upbit under regulatory scrutiny.

The financial impact was cushioned by Upbit’s reserve funds, which minimized direct damage to users. This incident follows a historical pattern of high-profile crypto exchange breaches.

Upbit’s quick asset freezing was in coordination with Solana and blockchain analytics firms. While preventing further unauthorized access, it also provided a learning scenario for exchanges on improving hot wallet security. Their strategy successfully contained liquidity risks.

Potential results include increased regulatory examinations and enhancements in wallet security protocols.

Previous breaches emphasize challenges in the crypto sector’s technological and regulatory areas. Historical data reveals exchange vulnerabilities, which influence market practices and policies.

At about 4:42 a.m. KST on Nov 27, 2025, we detected the breach and promptly suspended Solana network deposits and withdrawals. – Oh Kyung-seok, CEO, Dunamu Inc.