It has been a rocky road for Dunamu, the parent company of the popular South Korean crypto exchange Upbit. Following a massive $36 million hack in November 2025, the company now finds itself in the crosshairs of local financial regulators. South Korea’s Financial Supervisory Service (FSS) has officially stepped in, signaling that regulatory sanctions could soon be on the horizon.
The $36 Million Breach and Regulatory Backlash
The FSS recently sent Dunamu an inspection opinion letter, which essentially kicks off the formal sanctions process. This letter gives the exchange operator a brief window to respond to the regulator’s findings before any official penalties are proposed or finalized. Much of the government’s scrutiny stems from how the exchange communicated during the November breach. The attack lasted for nearly an hour in the early morning, but Upbit did not notify the public until the end of the day. Critics and local news outlets pointed out that this delay conveniently allowed a major merger-related event involving internet giant Naver Financial to wrap up before the bad news broke.
Complicating the situation for regulators is the current state of South Korean crypto law. The FSS is trying to determine if Upbit violated the Virtual Asset User Protection Act, but this legislation currently lacks explicit rules or penalties regarding cyberattacks and hacks. To fix this glaring regulatory gap, authorities are planning to roll out strict compensation and sanction guidelines for system failures in the upcoming second phase of the Digital Asset Basic Act.
How Upbit is Responding to Protect Users
Despite the regulatory heat, Upbit has taken significant steps to make things right with its users and secure its platform. Shortly after the exploit, the exchange managed to successfully freeze about $1.5 million worth of the stolen funds. More importantly, Upbit promised to fully reimburse all affected customers directly from its own corporate treasury, ensuring that everyday traders would not take a financial hit from the breach.
Behind the scenes, the company has completely overhauled its crypto wallet architecture to patch any lingering vulnerabilities, safely migrating all assets away from the affected wallets. To help track down the missing millions and aid in recovery efforts, Upbit also launched an automated “Onchain AI Tracer System” in December 2025. Even with the challenges of the recent hack, Upbit remains a massive player in the global crypto market, currently ranking third worldwide among spot exchanges with hundreds of millions of dollars in daily trading volume.
