South Korea’s Upbit Experiences $36 Million Loss in Solana Sizzling-Pockets Breach – Decrypt

In short
Upbit mentioned irregular transfers on the Solana community drained about $36 million throughout a number of tokens, together with BONK, JTO, SONIC, and USDC.
The trade moved remaining funds offline and is coordinating on-chain freezes with issuers after securing a portion of Solayer tokens.
The CEO of Dunamu, Upbit’s dad or mum, mentioned the trade will absolutely reimburse prospects.
South Korea’s largest crypto trade, Upbit, disclosed a safety incident involving property on the Solana community on Thursday, reporting losses of roughly $36 million because the platform moved to comprise the breach.The trade mentioned it detected irregular withdrawals linked to a compromised hot-wallet deal with, prompting it to halt some providers whereas investigators traced the movement of funds.“At round 04:42 on 2025-11-27, Upbit confirmed {that a} portion of Solana community property (roughly 54 billion KRW value) had been transferred to a pockets deal with not designated internally (an unknown exterior pockets),” a tough translation of Dunamu CEO Oh Kyung-seok’s public discover reads.Affected property embrace meme cash similar to Bonk (BONK), Moodeng (MOODENG), Official Trump (TRUMP), and decentralized finance tokens similar to Sonic SVM (SONIC), Entry Protocol (ACS), Jito (JTO), Solana (SOL), and Raydium (RAY), amongst different tokens similar to Pudgy Penguin (PENGU). The record additionally consists of Circle’s USD Coin (USDC).“The size of the loss attributable to the irregular withdrawals was recognized internally instantly upon affirmation,” Oh mentioned, including that Upbit will “absolutely compensate the complete quantity with its personal property in order that no affect happens to members’ property.”Upbit mentioned it has initiated an emergency safety assessment of all associated networks and pockets programs instantly after detecting the irregular transfers. Per Oh’s discover, the trade moved all remaining property into chilly storage to forestall extra irregular withdrawals, and it's coordinating on-chain freeze makes an attempt with related tasks after efficiently freezing a portion of Solayer (LAYER).Upbit added that broader deposit and withdrawal providers will resume solely after systemwide safety checks are accomplished.The suspected hack comes as Dunamu, Upbit’s dad or mum firm, has been navigating certainly one of its most consequential company transitions in years, with the agency set to be absorbed into Naver Monetary below a $10.3 billion stock-swap settlement.Decrypt reached out to Dunamu for remark. It is a growing story.Each day Debrief NewsletterStart day by day with the highest information tales proper now, plus unique options, a podcast, movies and extra.