South Korea Pursues Dunamu Following Upbit Security Breach

South Korea Pursues Dunamu Following Upbit Security Breach

South Korea’s Financial Supervisory Service (FSS) has initiated formal sanctions against Dunamu, the operator of Upbit, in response to a significant wallet breach that occurred in November 2025. This breach raised concerns about existing legal frameworks and the extent of regulatory power over incidents of hacking.

Regulatory Proceedings and Legal Uncertainties

The FSS has opened a sanctions process to determine any penalties that may be appropriate following the breach, which affected assets held on the exchange’s platform. Since the current Virtual Asset User Protection Act lacks specific provisions for hacking penalties, there is considerable uncertainty regarding how stringent any sanctions can be.

Details of the Incident

The attack on Upbit, reported on November 27, 2025, primarily targeted Solana-based assets. Initial estimates reported a loss of approximately $36 million, while more recent assessments indicated losses closer to 44.5 billion won, or around $32 million. In response to the breach, Upbit moved its assets to cold wallets, suspended deposits and withdrawals, and began tracking the stolen funds. They have assured affected customers that losses will be covered from company funds.

Timeline of Regulatory Actions

The FSS’s recent actions follow months of investigation into whether Upbit complied with its obligations under national crypto regulations. The regulator has sent Dunamu an inspection opinion letter, which allows the company to respond before any penalties are finalized. Following Dunamu’s response, the sanctions process will advance through several regulatory review stages.

Existing Regulatory Challenges

The limitations of the current legal framework, which encompasses custody, unfair trading, and customer protection regulations, highlight a significant gap regarding penalties for hacking incidents. As a result, the FSS’s ability to impose detailed sanctions for this breach remains ambiguous.

Broader Implications for Dunamu and the Market

Previously, Dunamu faced regulatory scrutiny when the Financial Intelligence Unit imposed a fine of 35.2 billion won for failures related to anti-money laundering practices. This earlier enforcement action underwent judicial review, revealing inconsistencies in the legal bases for sanctions. The current proceedings against Dunamu may set a precedent on how South Korean law applies to crypto exchanges in similar situations.

Pending Regulations and Corporate Actions

Amid these regulatory challenges, Dunamu’s share swap deal with Naver Financial has been postponed to December 31, pending the necessary regulatory approvals. While the sanctions process does not inherently obstruct this transaction, Dunamu remains under scrutiny as South Korea contemplates stronger legislation surrounding hacking incidents and technology failures in the digital asset landscape.