REUTERS
November 28, 2025 at 11:50 JST
A representations of cryptocurrencies in this illustration taken on Jan. 24, 2022. (REUTERS)
SEOUL--South Korea suspects a North Korean team may be behind the recent hacking of cryptocurrency exchange Upbit that led to the unauthorized withdrawal of 44.5 billion won ($30.4 million) in cryptocurrencies, the Yonhap News Agency reported on Friday.
South Korean authorities are inspecting Upbit’s systems and suspect a group of hackers affiliated with North Korea’s spy agency, known as the Lazarus Group, were involved in what the exchange called "an abnormal withdrawal," Yonhap said.
The Lazarus Group has been blamed for a number of crypto heists in recent years, with the U.S. Federal Bureau of Investigation citing North Korea’s cyber operations as "one of the most advanced persistent threats."
Thursday’s hack at Upbit had the signature of the heist of 58 billion won in cryptocurrencies in 2019 that was linked to Lazarus, Yonhap cited an unnamed government official as saying.
An official at South Korea’s National Police Agency team investigating cyber crimes said an investigation has been launched into the case, but declined further comment. The National Intelligence Service could not be reached for comment.
An official at Dunamu, the operator of Upbit, said: "We are currently investigating the cause and scale of the asset outflow."
The attack occurred hours before South Korean internet giant Naver announced the acquisition of Dunamu. Upbit is the country’s largest cryptocurrency exchange.
A peek through the music industry’s curtain at the producers who harnessed social media to help their idols go global.
A series based on diplomatic documents declassified by Japan’s Foreign Ministry
Here is a collection of first-hand accounts by “hibakusha” atomic bomb survivors.
Cooking experts, chefs and others involved in the field of food introduce their special recipes intertwined with their paths in life.
A series about Japanese-Americans and their memories of World War II
