South Korea's Financial Supervisory Service has started a sanctions process against Dunamu, the operator of the country's largest crypto exchange Upbit. The move follows a $32 million hack on the platform and marks the first major test of the nation's new Virtual Asset User Protection framework.
The $32 million breach
The sanctions stem from a security breach that cost Upbit $32 million. The FSS has not disclosed when the hack occurred or how attackers pulled it off. What's clear is that the regulator sees the incident as a serious enough failure to trigger formal enforcement.
Testing the new rules
South Korea's Virtual Asset User Protection framework took effect earlier this year. This is the first time the FSS has used it to go after a major exchange operator. The process will examine whether Dunamu violated its obligations to safeguard user assets. The outcome could define how strictly the rules are enforced going forward.
Dunamu now faces a formal sanctions review. The FSS can impose penalties ranging from fines to business restrictions. The company hasn't commented publicly on the process. For an exchange that dominates the Korean market, the stakes are high — a precedent is being set, and everyone in the industry is watching.
The FSS hasn't announced a timeline for its decision. Dunamu's response, and the regulator's final call, will shape how the new law is applied to future cases.
