The leading trading platform in South Korea has encountered an issue—Upbit suffered a hacker attack in the early hours of November 27, resulting in a direct loss of 54 billion won (approximately 36 million USD).

The incident occurred at 4:42 AM. The platform's monitoring system suddenly detected abnormal withdrawal operations, and upon investigation, it was found that a large amount of assets from the Solana ecosystem was being transferred to a strange wallet address. By the time they realized what was happening, the money was already gone.
What is the good news? Oh Kyung-seok, the CEO of Dunamu, the parent company of Upbit, immediately issued a statement: this time the platform will cover all losses, and users won’t have to pay a single penny. This commitment is indeed quite strong.
**What exactly was lost?**
More than 30 types of tokens on the Solana chain have been moved, including those that have been very popular recently: JTO, BONK, ORCA, PYTH, which you must have heard of. The complete list also includes SOL, USDC, JUP, RENDER, PENGU, TRUMP, MEW, DRIFT, and a long string of others. Basically, they are all varieties with high trading volume in the Solana ecosystem.
**How does the platform respond?**
After discovering the problem, Upbit acted relatively quickly:
- Freeze related assets for withdrawal and deposit functions in seconds
- The technical team has started tracking the attack path.
- Urgently replenish funds into the hot wallet to ensure normal usage for other users.
The deposit and withdrawal services are currently suspended, and the official statement says that a security inspection is being conducted.
In the context of the entire Asian market, this incident is considered one of the largest exchange security incidents of the year. The issue of hot wallet protection has once again been brought to the forefront.