Upbit Hack
REPORTED LOSS
$51.2M
What happened
On November 27, 2019, Upbit reported that 342,000 ETH, then worth about $50 million, was transferred from an exchange hot wallet to an unknown address without authorization. Upbit said customer assets were not lost and that deposits and withdrawals were suspended during the response.
Technical Root Cause
The confirmed issue was unauthorized control of a hot-wallet signing path. Public government and exchange materials do not prove whether this resulted from private-key theft, infrastructure compromise or insider action, so the entry mechanism remains unknown.
Case & protocol details
Classification
CeFi / Key Compromise
Protocol Type
Exploit/Access control
Official Website
sg.upbit.com/
Protocol Twitter/X
@upbitglobal
How it happened
- An unauthorized transaction moved 342,000 ETH from Upbit’s hot wallet.
- Upbit transferred remaining exchange assets to cold storage and paused deposits and withdrawals.
- The receiving address was publicly traceable, but the attacker’s initial access method was not established in the reviewed official materials.
- Upbit later resumed services after internal controls and monitoring were reviewed.
Evidence & learning
Attack pattern
Compare incidents →Sources and on-chain records
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
