Ethereum News Today: North Korean Hackers' Multi-Chain Laundering Exposes Crypto's Security Weaknesses

Generated by AI AgentCoin WorldReviewed byAInvest News Editorial Team
Friday, Nov 28, 2025 2:24 pm ET2min read
Speaker 1
Speaker 2
AI Podcast:Your News, Now Playing
Aime RobotAime Summary

- North Korean hackers suspected in $36.8M Upbit breach used multi-chain laundering across

and to obscure stolen assets.

- Upbit froze transactions, pledged user reimbursements, and faces regulatory fines for delayed reporting amid a $10.3B merger with Naver.

- Attack mirrors 2019 Lazarus tactics, exposing crypto industry vulnerabilities as stolen funds were rapidly converted into $1.6M via 185 wallets.

- Market volatility surged with altcoin price spikes, while regulators intensify scrutiny over exchange security protocols and data handling.

- Incident highlights systemic risks in crypto infrastructure, accelerating global calls for clearer regulatory frameworks against state-sponsored cyber threats.

Experts have raised alarms that the recent $36.8 million hack on South Korea's Upbit exchange may be far more severe than initially reported, with North Korean state-backed hackers suspected of employing advanced multi-chain laundering techniques to move stolen assets across

and networks . The breach, which affected over 20 Solana-based tokens including , , and RENDER, has triggered a full freeze of withdrawals and deposits while the exchange works to secure remaining funds . Upbit, the country's largest cryptocurrency exchange, has pledged to reimburse users using its reserves, assuring no personal losses .

The attack, occurring just days before the sixth anniversary of Upbit's 2019 $50 million breach by North Korea's Lazarus group, has intensified scrutiny on the exchange's security protocols

. Authorities suspect Lazarus's involvement due to the attack's methodology, which mirrored the 2019 hot-wallet breach and included rapid cross-chain transfers to obscure the trail . On-chain data revealed the hacker converted stolen Solana tokens into Ethereum across 185 wallets within hours, accumulating over $1.6 million in proceeds .
The sophistication of the operation has raised concerns about the evolving tactics of state-sponsored cybercriminals in the crypto sector.

Upbit's parent company, Dunamu, faces compounding challenges as it announced a $10.3 billion merger with Naver on the same day as the hack. Regulators have launched emergency inspections into the incident, with South Korea's financial watchdog imposing a record 35.2 billion won ($29 million) penalty for delayed reporting and data-handling lapses

. The merger's future now hinges on the outcome of these investigations, as authorities may halt new user sign-ups for three months, .

The hack has also had immediate market ripple effects. In South Korea, traders capitalized on halted arbitrage bots by pushing altcoin prices upward, with local exchanges seeing surges in tokens like BONK and TRUMP

. Meanwhile, broader crypto markets remain volatile, with and Ethereum treasuries facing unrealized losses as investors react to the incident .

Upbit's response has been swift but cautious. The exchange moved remaining assets to cold storage and froze $8.18 million in

tokens . CEO Oh Kyung-seok emphasized that cold wallets-where most user funds are held-remained secure . However, the incident underscores systemic risks in the crypto industry, particularly for exchanges handling high-value, fast-moving assets.

As investigations continue, the breach serves as a stark reminder of the vulnerabilities in digital asset infrastructure and the need for robust regulatory frameworks. With over 65 crypto organizations recently urging U.S. regulators to clarify digital asset rules

, the Upbit incident may accelerate calls for global standards to combat evolving cyber threats.