South Korea’s Monetary Supervisory Service has begun a proper sanctions course of towards Dunamu, the operator of crypto alternate Upbit, over the main pockets breach reported in November 2025.
The motion follows a months-long inspection into whether or not the alternate met its duties beneath the nation’s Digital Asset Consumer Safety Act.
In response to an SBS report citing monetary authorities, the FSS just lately despatched Dunamu an inspection opinion letter. The doc provides the corporate an opportunity to reply earlier than regulators resolve what penalties, if any, ought to comply with. The method then strikes by a number of formal regulatory evaluation levels.
FSS opinions Upbit’s response to the 2025 breach
The November 27 assault affected Solana-based property held by Upbit. Early estimates diversified, with crypto.information reporting losses of about $36 million based mostly on figures obtainable on the time. South Korean reviews now place the affected quantity at 44.5 billion received, value about $32 million at present alternate charges.
Upbit mentioned it moved property to chilly wallets, halted deposits and withdrawals, and commenced tracing the stolen funds after detecting irregular transfers. In its official buyer discover, the alternate mentioned buyer losses can be lined with firm funds. Authorities later examined each the safety failure and the timing of Upbit’s public disclosure.
Authorized hole makes the potential sanctions unclear
The present Digital Asset Consumer Safety Act provides regulators powers over custody, unfair buying and selling and buyer safety, but it surely doesn’t set direct penalties particularly for hacking or pc system failures. That leaves uncertainty round how far the FSS can go on this case.
The regulator will take into account Dunamu’s response earlier than issuing advance discover of any proposed motion. Last measures would require additional evaluation by the sanctions evaluation committee, the Securities and Futures Fee and the Monetary Companies Fee. South Korean authorities are additionally contemplating stronger guidelines for hacking and know-how failures within the subsequent section of digital asset laws.
Upbit has confronted wider regulatory strain
The hack arrived throughout a interval of shut regulatory consideration on Dunamu. As reported by crypto.information, South Korea’s Monetary Intelligence Unit beforehand imposed a 35.2 billion received positive on the corporate over anti-money laundering and buyer verification failures.
That earlier enforcement motion later confronted court docket scrutiny. Crypto.information reported {that a} court docket canceled a three-month partial suspension towards Dunamu after discovering gaps within the authorized foundation used for the sanction. The most recent hacking case may create one other check of how current legal guidelines apply to crypto alternate operations.
Dunamu’s Naver deal stays beneath evaluation
The sanctions course of additionally comes whereas Dunamu works by a deliberate share swap with Naver Monetary. the businesses just lately delayed completion of the transaction to December 31 as a result of a number of regulatory approvals stay excellent.
The present inspection doesn’t routinely block that deal. Nonetheless, Dunamu stays beneath a number of layers of regulatory evaluation whereas South Korea prepares broader digital asset guidelines. The FSS has not but introduced a proposed sanction stage within the hacking case, and Dunamu nonetheless has a possibility to problem the inspection findings earlier than any last choice.
