South Korea Launches Sanctions Against Upbit Operator Dunamu

• South Korea begins sanctions proceedings against Upbit operator Dunamu after hack.
• FSS reviews Dunamu’s response before deciding possible enforcement measures.
• Legal gaps may influence penalties and future crypto oversight in South Korea.

South Korea has begun formal sanctions proceedings against Dunamu, the operator of cryptocurrency exchange Upbit, following a major wallet hack in November 2025. The Financial Supervisory Service (FSS) has issued an inspection opinion letter, marking the first step toward possible regulatory action while legal uncertainty surrounding crypto hacking penalties continues.

FSS Opens Formal Review Following Upbit Hack

South Korea’s Financial Supervisory Service has formally launched sanctions proceedings against Dunamu after investigating Upbit’s November 2025 security breach.

The regulator issued an inspection opinion letter, allowing Dunamu to present its response before authorities determine any possible enforcement measures.

The investigation follows a wallet hack that targeted Solana-based digital assets and resulted in losses totaling approximately 44.5 billion won, or $32 million.

🚨SOUTH KOREA LAUNCHES SANCTIONS PROCEEDINGS AGAINST UPBIT OPERATOR DUNAMU!

South Korea’s Financial Supervisory Service has initiated sanctions procedures against Dunamu, the operator of Upbit, over a 44.5 billion won (~$32 million) hacking incident from last year.

The… pic.twitter.com/LRvG1yLBRU

— Crypto Banter (@crypto_banter) July 19, 2026

The attack occurred on November 27, 2025, and reportedly lasted about fifty-four minutes before Upbit detected unauthorized asset transfers.

Following the incident, Upbit suspended deposits and withdrawals while moving customer assets into cold wallets to strengthen platform security immediately.

The exchange also announced that affected customers would receive full reimbursement using company funds instead of passing financial losses onto users.

Authorities later examined the exchange’s response procedures, including the timing of its public disclosure after the security breach became widely known.

Although early estimates valued stolen assets near $36 million, regulators now recognize losses at approximately 44.5 billion won using updated calculations.

The FSS will evaluate Dunamu’s explanation before deciding whether the case should proceed toward formal sanctions through South Korea‘s regulatory framework.

Any final decision must also receive approval from the sanctions review committee, Securities and Futures Commission, and Financial Services Commission before implementation.

Legal Uncertainty Could Shape Regulatory Outcome

The case has drawn attention because South Korea’s Virtual Asset User Protection Act lacks direct provisions addressing hacking incidents or system failures.

Consequently, regulators face uncertainty regarding the scope of penalties available under existing legislation despite completing months of investigative work.

The current sanctions process could therefore become an important test of how broadly financial authorities interpret their enforcement powers over cryptocurrency platforms.

South Korean officials have already indicated that future digital asset legislation may introduce clearer rules covering hacking incidents and customer compensation requirements.

Meanwhile, Dunamu remains under broader regulatory scrutiny following previous anti-money laundering and customer verification enforcement actions by financial authorities.

Earlier proceedings included a proposed 35.2 billion won penalty, although a court later canceled part of that enforcement over legal concerns.

The company is also awaiting regulatory approvals for a planned share swap involving Naver Financial, scheduled for completion before year-end.

Current sanctions proceedings do not automatically affect that transaction, though regulators continue reviewing Dunamu across several compliance matters simultaneously.

The FSS has not disclosed the severity of possible sanctions because the review process remains ongoing and subject to multiple regulatory approvals. Market participants will closely monitor the outcome, as the decision could influence future oversight standards for South Korea’s cryptocurrency exchange industry.