South Korea’s largest crypto exchange, Upbit, is pulling almost all customer assets into cold storage after hackers drained about ₩44.5 billion, roughly 30 million dollars, from a Solana hot wallet. The company now plans to hold 99 percent of user funds offline and cut hot wallet exposure to effectively zero.
Under Korea’s Virtual Asset User Protection Act, exchanges are required to keep at least 80 percent of customer assets in cold wallets. Upbit was already above that line before the incident. The new move goes significantly further and is being framed by the company as a hard reset on security and risk.
Upbit’s operator says all user losses will be covered from the exchange’s own reserves and that the specific hot wallet vulnerability has been patched. For customers, that means no haircut on balances but a very different operational model going forward.
The breach targeted a hot wallet connected to the Solana network. Hot wallets are online addresses used to process deposits and withdrawals quickly, which makes them convenient but also a prime target for attackers.
In this case, hackers were able to exploit a weakness in the Solana hot wallet infrastructure and siphon off a basket of Solana based assets. The attack did not touch Upbit’s cold wallets, which remained secure throughout the incident.
Once the intrusion was detected, Upbit halted Solana network deposits and withdrawals, moved remaining assets to cold storage and began working with projects and other platforms to freeze any stolen tokens that had not yet been sold. The company then completed a wider overhaul of its wallet infrastructure before announcing the 99 percent cold storage policy.
Korean regulation sets a clear baseline. Licensed exchanges must store at least 80 percent of customer assets in cold wallets. This rule was designed to ensure that the majority of funds are out of reach in the event that a hot wallet is compromised.
Upbit’s new framework goes far beyond that minimum. The company says it will:
For context, many global exchanges have reported cold storage ratios in the mid to high 90s. Pushing hot wallet exposure down toward a single percentage point sets a new benchmark for Korean platforms and puts Upbit at the strict end of the spectrum.
For everyday customers, the headline promise is simple: security first. If almost all assets are in cold storage and the exchange commits to covering losses from its own reserves, the direct risk of losing funds in a hot wallet hack is greatly reduced.
There are trade offs.
Cold wallets are not connected to the internet, so moving funds in and out is slower and more operationally complex. That can create friction in several areas:
Upbit will need to balance its fortress posture with a smooth user experience, especially in a market where traders are sensitive to delays and price gaps.
Korea’s crypto market is relatively closed compared with global venues, which has historically contributed to the so called Kimchi premium – a tendency for local prices to trade at a premium to global averages when demand spikes.
Reducing hot wallet exposure to near zero raises questions about whether short term liquidity will tighten further. If withdrawal queues lengthen during busy periods, it can become harder for arbitrageurs to move funds quickly enough to close price gaps between Korean and overseas exchanges.
In practice, the impact will depend on how efficiently Upbit can shuttle funds between cold and hot wallets in real time and whether other domestic exchanges follow with similar policies. If several platforms adopt fortress style ratios at once, the overall market could see more frequent premiums and discounts during stress.
The size of the hack and the scale of Upbit’s response are likely to influence how other exchanges handle wallet security. Several signals are notable:
Exchanges that currently operate closer to the minimum cold storage requirement may face pressure from users, regulators or competitors to publish and improve their own ratios. In the longer term, transparent cold to hot wallet metrics could become as important for customer trust as proof of reserves reports.
Upbit’s decision to move 99 percent of user assets into cold storage after a ₩44.5 billion Solana hot wallet hack marks one of the most aggressive security pivots by a major exchange.
By going far beyond Korea’s 80 percent requirement and pledging to cover all user losses from its own reserves, the company is trying to turn a damaging incident into a turning point for its security posture and reputation.
For the wider market, the move raises a broader question. If fortress mode becomes the new normal for leading exchanges, crypto trading may edge toward a world where security and resilience take clear priority over instant liquidity and ultra fast withdrawals.
The post Upbit Goes Fortress Mode With 99% Cold Storage After ₩44.5B Hack appeared first on Crypto Adventure.
