Korea's Financial Supervisory Service Initiates Sanction Procedures Against Dunamu for Delayed Reporting of Upbit Hack Last Year
The Financial Supervisory Service of Korea has issued a inspection opinion to Dunamu, the parent company of Upbit, regarding the hacker attack incident on Upbit in November last year, officially initiating sanction procedures due to the delayed disclosure of facts after the merger activities with Naver Financial.
The company has frozen and recovered approximately 2.6 billion KRW in assets, while the remaining 38.6 billion KRW in user losses will be fully compensated by Upbit's own assets.
In terms of market mechanisms, strengthened regulation prompts exchanges to enhance security and disclosure standards, leading funds to flow towards platforms with high compliance transparency, benefiting large exchanges that strengthen risk control, while putting pressure on operators with weak disclosure and security management.
Source: Public Information
ABAB AI Insight
Dunamu, as the parent company of Upbit, has faced scrutiny multiple times amid tightening cryptocurrency regulations in Korea. This delayed reporting controversy continues the regulatory strict requirements on platform responsibilities and information disclosure, similar to previous enforcement paths following incidents at exchanges.
In terms of capital pathways, regulatory agencies are pressuring Dunamu through sanction procedures to improve internal controls, forcing resources to shift towards compliance systems and user compensation preparations, with the motivation to strengthen market trust. The second phase of the "Digital Asset Basic Law" will supplement direct penalties for hacker incidents in the future.
Similar to cases of regulatory upgrades following global exchange hacking incidents (such as the rules in the U.S. after FTX), the Korean cryptocurrency market is at a critical stage of transitioning from user protection laws to a comprehensive digital asset basic law.
This essentially reflects regulatory changes: existing laws have limited punitive authority over systemic incidents, pushing for legislative improvements. The mechanism involves rising trust costs exposed by delayed reporting and hacking incidents, forcing capital to shift from high-risk operations to strong compliance infrastructure, thereby enhancing the overall safety standards and entry barriers of the industry.
ABAB News · Cognitive Law
Delayed reporting angers regulators more than the hack itself.
User losses come out of pocket, but the platform's reputation is permanently damaged.
Legislation fills loopholes, and capital accelerates towards compliance barriers.