Brazil’s largest crypto exchange Mercado Bitcoin confirmed earlier Monday a security incident and paused withdrawals.
Breach
In brief
- Upbit said irregular transfers on the Solana network drained about $36 million across multiple tokens, including BONK, JTO, SONIC, and USDC.
- The exchange moved remaining funds offline and is coordinating on-chain freezes with issuers after securing a portion of Solayer tokens.
- The CEO of Dunamu, Upbit’s parent, said the exchange will fully reimburse customers.
South Korea’s largest crypto exchange, Upbit, disclosed a security incident involving assets on the Solana network on Thursday, reporting losses of roughly $36 million as the platform moved to contain the breach.
The exchange said it detected irregular withdrawals linked to a compromised hot-wallet address, prompting it to halt some services while investigators traced the flow of funds.
“At around 04:42 on 2025-11-27, Upbit confirmed that a portion of Solana network assets (approximately 54 billion KRW worth) had been transferred to a wallet address not designated internally (an unknown external wallet),” a rough translation of Dunamu CEO Oh Kyung-seok’s public notice reads.
Affected assets include meme coins such as Bonk (BONK), Moodeng (MOODENG), Official Trump (TRUMP), and decentralized finance tokens such as Sonic SVM (SONIC), Access Protocol (ACS), Jito (JTO), Solana (SOL), and Raydium (RAY), among other tokens such as Pudgy Penguin (PENGU). The list also includes Circle’s USD Coin (USDC).
“The scale of the loss caused by the abnormal withdrawals was identified internally immediately upon confirmation,” Oh said, adding that Upbit will “fully compensate the entire amount with its own assets so that no impact occurs to members’ assets.”
Upbit said it has initiated an emergency security review of all related networks and wallet systems immediately after detecting the irregular transfers.
Per Oh’s notice, the exchange moved all remaining assets into cold storage to prevent additional abnormal withdrawals, and it is coordinating on-chain freeze attempts with relevant projects after successfully freezing a portion of Solayer (LAYER).
Upbit added that broader deposit and withdrawal services will resume only after systemwide security checks are completed.
The suspected hack comes as Dunamu, Upbit’s parent company, has been navigating one of its most consequential corporate transitions in years, with the firm set to be absorbed into Naver Financial under a $10.3 billion stock-swap agreement.
Decrypt reached out to Dunamu for comment. This is a developing story.
Daily Debrief Newsletter
Start every day with the top news stories right now, plus original features, a podcast, videos and more.
More Pain Ahead? Bitcoin Trendline Breach Sparks Talk Of Corrective Wave In Play
Bitcoin’s weekly chart is at a pivotal point, with price action hovering around key structural levels. Traders are now questioning whether the current move marks the start of a deeper correction or just a healthy consolidation before the next leg up.
Elliott Wave Signals Align With Developing Correction
Elliott Waves Academy, in its latest analysis tracking Bitcoin’s expected wave path on the weekly timeframe, has raised a key question: has the corrective wave begun? The recent market structure indicates that the bullish leg has likely completed, and the price may now be transitioning into a corrective phase. A critical support level of the prior upward wave has been broken, hinting at a potential wave reversal in progress.
The evidence for this transition grows stronger when observing the break below the lower boundary of the diagonal pattern and the final price channel. Both of these structures previously acted as strong supports during Bitcoin’s impulsive climb, and their breakdown now suggests that market control is slowly shifting from buyers to sellers.
Currently, Bitcoin is trading beneath the lower boundary of the price channel, which has flipped into a key resistance zone. As long as the price remains below this zone, bearish sentiment could persist, keeping the market in a cautious state.
Despite the weakness, there are signs that the downward sub-wave might be nearing completion. The structure suggests that a short-term upward corrective wave could emerge as the market attempts to stabilize and regain footing.
Expected Outlooks
Sharing his expectations, Elliott Waves Academy noted that Bitcoin may continue to consolidate around its current levels as bulls attempt to defend their positions. Such a phase of sideways movement often reflects a period of indecision in the market, where both buyers and sellers are waiting for confirmation before committing to their next major moves.
However, the Academy cautioned that if signs of weakness begin to emerge near the current resistance zone, the market could face a potential reversal. This shift could trigger renewed bearish pressure, pushing Bitcoin into a deeper corrective leg.
According to the analysis, the correction could extend toward the 50%–61.8% Fibonacci retracement levels of the previous upward wave. These Fibonacci zones often serve as key areas of support during corrective movements, and a decline into these ranges could provide a more stable foundation for a future bullish reversal.
Ultimately, monitoring price behavior around these crucial levels in the following days will be essential. Whether the market holds firm in consolidation or slips into a deeper retracement, the upcoming movements in these zones could set the tone for the next phase of Bitcoin’s long-term wave cycle.