South Korean Regulator Begins Sanctions Process Against Dunamu: Report
South Korea's Financial Supervisory Service has sent an inspection opinion letter to Dunamu, the operator of crypto exchange Upbit, regarding the $36 million hack from November 2025.
Intelligence analysis by Llama

South Korea's financial regulator has started a sanctions procedure against Dunamu, the operator of Upbit, due to a $36 million hack in November 2025. The regulator is reviewing whether the exchange violated the Virtual Asset User Protection Act, which lacks explicit sanctions provisions for hacking and computer system incidents.
Imagine you have a special kind of bank account where you can store and trade a digital currency called Bitcoin. But one day, someone hacks into the bank and steals $36 million worth of Bitcoin. The bank is in trouble because it didn't do enough to protect its customers' money. Now, the government is investigating the bank to see if it did anything wrong.
Analysis
A $60B Vote of Confidence
The South Korean regulator's decision to begin a sanctions process against Dunamu, the operator of Upbit, is a significant development in the country's crypto regulatory landscape. The $36 million hack in November 2025 has raised concerns about the security of crypto exchanges and the need for stricter regulations. The Virtual Asset User Protection Act, which provides no direct sanctions provisions related to cyberattacks or computer hacks, has been criticized for its lack of clarity. The regulator's move to address this regulatory gap by adding sanctions and compensation provisions for hacking and computer system failures to the second phase of the Digital Asset Basic Act is a positive step towards protecting users and promoting a safe and secure crypto environment.
Why Cursor?
The Upbit hack has also raised questions about the role of regulators in preventing such incidents. The exchange's delay in announcing the hack has been criticized, and the regulator's decision to start a sanctions process is a clear indication that they are taking the issue seriously. The regulator's review of whether the exchange violated the Virtual Asset User Protection Act is a crucial step in determining the extent of the sanctions. The outcome of this review will have significant implications for the crypto industry in South Korea and will set a precedent for future regulatory actions.
The Road Ahead
The regulator's decision to start a sanctions process against Dunamu is a significant development in the country's crypto regulatory landscape. The outcome of this review will have significant implications for the crypto industry in South Korea and will set a precedent for future regulatory actions. The regulator's move to address the regulatory gap by adding sanctions and compensation provisions for hacking and computer system failures to the second phase of the Digital Asset Basic Act is a positive step towards protecting users and promoting a safe and secure crypto environment.
Key points
- South Korea's Financial Supervisory Service has sent an inspection opinion letter to Dunamu, the operator of Upbit, regarding the $36 million hack from November 2025.
- The regulator is reviewing whether the exchange violated the Virtual Asset User Protection Act, which lacks explicit sanctions provisions for hacking and computer system incidents.
- The regulator's move to address the regulatory gap by adding sanctions and compensation provisions for hacking and computer system failures to the second phase of the Digital Asset Basic Act is a positive step towards protecting users and promoting a safe and secure crypto env…
If the regulator's sanctions process is successful, it could lead to a safer and more secure crypto environment in South Korea. This could encourage more people to invest in crypto and help the industry grow.
If the regulator's sanctions process is not successful, it could lead to a loss of trust in the crypto industry and a decline in investment. This could also lead to a decrease in the value of cryptocurrencies.



