Hack history / 2025 / Hack or exploit
Upbit
Hack or exploit on Nov 26, 2025 · Malware
SOURCES AGREE ON DATE AND LOSS · 3 SOURCES
Lost
$30.3M
sources: $30.2M to $36M
Returned
$1.8M
6% of the loss, as a source states it
Rank
#155
among thefts by dollars lost
What happened
Upbit hot wallet was drained on November 27, 2025 in 54 minutes for $36M in Solana tokens (USDC, BONK, JTO, SONIC, RAY, RENDER, ORCA, PYTH). Attacker exploited weak digital signature infrastructure that allowed private key derivation from on-chain transaction history.
Details
- Date
- Nov 26, 2025
- Kind
- Hack or exploit
- Method
- Malware
- How in
- Phishing and scams
- Target
- Centralized exchange
- Chains
- Solana
After the theft
- Frozen
- yes, amount not stated
“To safeguard user assets, Upbit suspended all cryptocurrency deposits and withdrawals and initiated on-chain tracking and asset-freezing procedures for funds transferred externally.” (SlowMist Hacked) - Recovered or frozen
- $1.8M
“$30.2M taken, $28.4M after recovery or freezing” (Web3 Is Going Great)
Related incidents
Cite this page
SwanBluechip, "Upbit hack, Nov 26, 2025: $30.3M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht18d3a5cb54/ (data as of 2026-10-31).