šØ UPBIT SAYS EMERGENCY AUDIT OF $30 MILLION HACK UNCOVERED FLAW THAT COULD EXPOSE PRIVATE KEYS šØ
South Korean exchange giant @Official_Upbit has revealed that an emergency security auditātriggered by a $30 million breach last monthāuncovered a deeper vulnerability that could have exposed usersā private keys. The disclosure sent shockwaves through the #crypto community and prompted immediate patching across multiple wallet providers who shared the same open-source component.
š Key Points
š¹ 30 MILLION DOLLAR TRIGGER: An attacker exploited a previously unknown flaw in Upbitās hot-wallet interface, draining roughly $30 million in ETH and ERC-20 tokens before internal monitoring froze remaining funds .
š¹ PRIVATE-KEY FLAW UNCOVERED: During the post-incident code review, Upbitās security team found a second bugārooted in a widely used open-source JavaScript signing libraryāthat could leak raw private-key material to browser memory under certain transaction-batch conditions .
š¹ SHARED CODE RISK: The vulnerable library is integrated into at least four other major custody and wallet services; Upbit quietly notified them through a coordinated-disclosure process and says patches have now been deployed with no additional exploits detected .
š¹ USER IMPACT: Upbit insists cold-storage funds were never at risk and that no customer keys have been observed in the wild; however, as a precaution it rotated every hot-wallet key and forced 2FA re-enrollment for all 8.3 million registered users .
š¹ REGULATORY RESPONSE: Koreaās Financial Intelligence Unit (FIU) has opened a special inquiry and ordered real-time penetration-test reports; failure to remedy the flaw could have jeopardized Upbitās recently renewed virtual-asset service provider (VASP) license .
š” Why It Matters
š¹ Supply-Chain Security: The incident highlights how a single open-source component can create systemic risk across multiple custodiansāeven those with otherwise robust cold-storage practices.
š¹ Exchange Transparency: Upbitās public disclosure and coordinated patching set a new bar for breach communication in Asia, contrasting with opaque handling seen in past regional hacks.
š¹ Regulatory Precedent: Korean authoritiesā rapid audit mandate signals that future license renewals will be contingent not only on asset segregation but also on proven secure-code governance.
š¹ Market Confidence: Despite the breach, Upbitās trading volume remained within 5 % of its 30-day average, suggesting traders now view quick-patch disclosures as less damaging than cover-upsāprovided no user keys are actually compromised.
Bottom line: Upbitās emergency audit transformed a costly hack into a wider security win for the ecosystem, exposingāand neutralizingāa private-key vulnerability that could have wreaked far greater havoc had it remained dormant.
https://www.theblock.co/post/380764/upbit-says-emergency-audit-of-30m-hack-uncovered-flaw-that-could-expose-private-keys