South Korean regulator begins sanctions process on Dunamu
South Korean regulator begins a formal sanctions process against Dunamu, Upbit’s operator, after the Financial Supervisory Service sent an inspection opinion letter over the exchange’s $36 million November 2025 hack. Yonhap News said the letter lets Dunamu reply before proposed penalties are notified.
Key Takeaways
- South Korea’s FSS has reportedly sent Dunamu an inspection opinion letter, starting sanctions proceedings tied to Upbit’s $36 million hack.
- The Virtual Asset User Protection Act lacks explicit sanctions for hacking, leaving penalty scope uncertain.
- Upbit faced criticism for announcing the November 27, 2025 breach only at day’s end after a Naver Financial-related event.
- Dunamu said it froze about $1.5 million, pledged full user reimbursement, and later launched an onchain tracing tool.
What did the South Korean regulator begin against Dunamu?
According to Cointelegraph, citing Yonhap News on Sunday, the Financial Supervisory Service (FSS) recently sent Dunamu an inspection opinion letter. That step marks the formal start of a sanctions procedure by financial authorities.
The letter gives Dunamu a chance to respond to inspection findings before the regulator notifies the company of proposed sanctions. Cointelegraph said it had approached Dunamu for comment.
Readers following Fintech & Crypto Alerts will recognize why this matters: Upbit is a major regional exchange, and a formal FSS process raises compliance stakes across South Korea’s crypto market.
Why does the $36 million Upbit hack still matter?
The breach lasted about 54 minutes, starting at 4:42 a.m. KST on November 27, 2025. Upbit only announced the hack at the end of the day, after a merger-related event involving internet giant Naver Financial concluded, Yonhap reported via Cointelegraph.
That delay drew criticism. The FSS is reviewing whether the exchange violated the Virtual Asset User Protection Act. The law provides no direct sanctions provisions related to cyberattacks or computer hacks, so the scope of any penalties remains uncertain.
South Korean authorities plan to address the gap by adding sanctions and compensation provisions for hacking and computer system failures in the second phase of the Digital Asset Basic Act, the report said.
How has Dunamu responded since the Upbit exploit?
After the November exploit, Upbit said it froze approximately 2.3 billion won ($1.5 million) worth of funds and would fully reimburse affected customers from its own balance sheet assets.
The exchange said it overhauled its crypto wallet architecture, migrated assets from affected wallets, and in December 2025 launched an Onchain AI Tracer System to track stolen funds and support recovery. Upbit ranks third in CoinMarketCap’s crypto spot exchange rankings based on traffic, liquidity and trading volumes.