WikiBit Exchange Exit Risk Ranking #7: UPbit — Kimchi Premium Is Gone, Trading Volume Has Collapsed, Regulators Are Watching Closely. Has UPbit’s Golden Era Come to an End?

Introduction: The “Kingpin” of South Koreas Crypto Market

In previous episodes, we investigated:

• HashKey — the “compliance top student”;
• HTX — the “sanctions disaster zone”;
• UZX — the “DAO penny stock”;
• Phemex — the “Wall Street elite team”;
• Tapbit — the “MSB license sticker king”.

Todays subject is a true heavyweight player:

UPbit.

Among global crypto exchanges, UPbit is a unique existence.

It is not a global nomadic giant like Binance, nor is it a U.S.-listed company built around regulatory compliance like Coinbase.

UPbit is more like a regional crypto kingdom in South Korea.

Inside South Korea, it dominates the market with more than 70% market share, becoming the “crypto bank” and “faith platform” for Korean retail investors.

But on the global stage, UPbits influence is far smaller than its actual trading volume would suggest.

From 2025 to 2026, UPbit experienced what can only be described as a roller-coaster year:

• In February 2025, South Koreas Financial Intelligence Unit (FIU) imposed a three-month business suspension on UPbit;
• In May 2025, its CEO, who had led the company for eight years, suddenly resigned;
• In the same month, South Korean internet giant Naver announced a $10.3 billion stock-swap acquisition of UPbits parent company, Dunamu;
• In April 2026, a court overturned FIUs suspension order;
• In 2026, Navers acquisition deal was delayed twice and remains incomplete;
• Trustpilot rating dropped to 1.6/5 — classified as “Bad”;
• South Koreas Financial Supervisory Service (FSS) officially launched a sanction process;
• Average daily trading volume plunged from around $9 billion to $1.78 billion, an 80% collapse.

This series of events has transformed the question:

“Could UPbit collapse？”

from a seemingly impossible scenario into a serious risk analysis topic.

1. Regulatory Compliance: The Regulatory Roller Coaster of South Koreas “Favorite Child”

UPbit Regulatory Status (Source: WikiBit)

South Korean VASP License: Valuable, But Full of Challenges

UPbit holds a Virtual Asset Service Provider (VASP) license issued by South Koreas Financial Intelligence Unit (KoFIU).

Under South Koreas Act on Reporting and Using Specified Financial Transaction Information, licensed VASPs must establish:

strong internal control systems;

anti-money laundering procedures;

shareholder eligibility reviews;

customer protection mechanisms.

This license carries significant value.

South Korea is one of the few countries worldwide that has established a relatively comprehensive regulatory framework for crypto exchanges.

2025 FIU Suspension: A Major Regulatory Warning

On February 25, 2025, FIU imposed a three-month partial business suspension on UPbit.

The penalty restricted new users from transferring digital assets.

The reason:

Regulators discovered approximately 700,000 cases of insufficient KYC compliance procedures.

Each violation could potentially result in fines of up to 100 million Korean won.

However, on April 9, 2026, the Seoul Administrative Court overturned the punishment.

The court ruled that:

regulatory guidance at the time was unclear;

Dunamu had made reasonable efforts to fulfill compliance obligations.

The decision may force South Korean regulators to create clearer rules for the digital asset industry.

$36 Million Hack: Regulators Launch Sanctions

At 4:42 AM on November 27, 2025, UPbits Solana hot wallet suffered a cyberattack.

Within just 54 minutes, hackers stole approximately:

$36 million worth of 24 Solana-based tokens.

The attacker was suspected to be North Koreas Lazarus Group.

The timing made the incident even more embarrassing.

The attack occurred just one day after UPbit and Naver Financial announced their $10.3 billion acquisition agreement.

The celebration of a historic acquisition had barely started before the company received a major security shock.

In July 2026, South Koreas Financial Supervisory Service (FSS) officially began sanction procedures against Dunamu.

The problem:

South Koreas current Virtual Asset User Protection Act mainly focuses on:

investor protection;

unfair trading activities.

It does not clearly define penalties for:

cyberattacks;

system failures;

security incidents.

Therefore, the final punishment remains uncertain.

Risk Rating: Medium Risk (Regulatory Perspective)

UPbit is not a “shady offshore exchange”.

It has:

a South Korean VASP license;

regulatory oversight;

court protection;

a potential acquisition by a major technology company.

However:

700,000 KYC violations;

a $36 million hack;

uncertainty around regulatory consequences;

are not minor issues.

Regulatory risk exists.

But it has not reached a fatal level.

2. Account Security and Withdrawals: Two Hacks, Each More Surreal Than the Last

If regulation is a chronic disease, then security is UPbits acute appendicitis.

Over six years, UPbit suffered two major hot-wallet hacks.

And the suspected attacker？

The same organization:

North Koreas Lazarus Group.

2019: Ethereum Hot Wallet Hack

In November 2019:

UPbits Ethereum hot wallet was hacked.

The attacker stole:

342,000 ETH

worth more than:

$50 million at the time.

This was UPbits first major security incident.

2025: Solana Wallet Attack

Six years later, in November 2025:

UPbits Solana hot wallet was attacked again.

The stolen amount:

Approximately:

44.5 billion Korean won

(around $36 million–$38.5 million).

The attack involved:

SOL;

USDC;

more than 20 Solana ecosystem tokens.

UPbits Emergency Response

Immediately after detection:

• all deposits and withdrawals were suspended;
• remaining Solana assets were moved to cold wallets;
• security investigations were launched.

But the most shocking detail was the root cause:

The attack was caused by a vulnerability that allowed attackers to estimate private keys through transaction analysis.

This was not a simple:

• leaked private key;
• insider theft;
• phishing attack.

It was a cryptographic implementation flaw.

For a top-tier exchange, this type of vulnerability is extremely rare.

User Withdrawal Experiences: Not Always Smooth Sailing

Major hacks are only part of the story.

What about normal users？

Here are several reported examples:

Example 1: $8,000 Withdrawal Delayed for 11 Days

A Singapore-based trader reported on Reddit that his $8,000 withdrawal was delayed for 11 days.

The reason:

The bank statement format he submitted did not meet UPbits requirements.

After submitting the correct documents, the withdrawal was finally processed.

Example 2: The “Source of Funds” Documentation Maze

Multiple users reported that large withdrawals triggered additional:

Source of Funds (SOF) reviews.

Users were required to provide:

bank statements;

proof of income;

transaction history.

Review periods ranged from:

several days to two weeks.

During this period:

funds were effectively frozen.

Example 3: Small Token “Forced Locking”

In 2025:

UPbit suspended withdrawals for certain assets due to network issues.

Examples include:

Ethereum Fair (ETHF) withdrawal suspension due to block production delays;

Horizen (ZEN) withdrawal suspension after network termination.

Users holding these assets had their funds temporarily locked inside the exchange.

Trustpilot Data: A Contradictory Reputation

Trustpilot reviews show:

Around 26% of users complained about withdrawal delays;

Meanwhile, 87% said they trusted UPbit more than other exchanges.

This contradiction perfectly reflects UPbits reputation:

Secure but inconvenient.

Risk Rating: Medium-High Risk (User Experience Perspective)

Many complaints from overseas users are real.

But UPbits core business is South Korea.

As long as Korean users remain loyal, the platform can continue operating successfully.

For international users, however, the experience can feel extremely frustrating.

The low Trustpilot score mainly comes from non-Korean users.

This also reveals an important reality:

UPbit does not prioritize global users.

Frequent security incidents can gradually damage user confidence and increase operating costs.

The real turning point would be a massive security failure that exceeds UPbits ability to compensate users.

For example:

A hack exceeding $1 billion.

At current profitability and reserve levels, UPbit appears far from that danger zone.

But the risk should not be ignored.

3. Reserve Transparency: An Industry Benchmark, But With Hidden Concerns

When it comes to reserve transparency, UPbit can be considered an industry benchmark.

The exchange has built its own Proof of Reserves (PoR) system, which compares on-chain asset holdings with its internal accounting records every five minutes to verify consistency.

The head of South Koreas Financial Supervisory Service (FSS), Lee Chang-jin, has ordered a comprehensive review of PoR systems across virtual asset exchanges.

Currently:

• Digital asset reserves cover approximately 102.99% of customer liabilities;
• Fiat currency reserves exceed 100% coverage (specific details have not been fully disclosed);
• As of the end of October 2025, the proportion of assets stored in cold wallets reached 98.33%.

This is far above the 80% minimum cold wallet requirement under South Koreas Virtual Asset User Protection Act.

It also exceeds the cold wallet ratios of major global exchanges such as:

• Coinbase: around 98%;
• Kraken: approximately 95%-97%.

However, UPbits reserve transparency has one major weakness:

It does not provide a continuous, publicly verifiable on-chain Proof of Reserves (PoR).

What does this mean？

Exchanges such as:

Binance;

Coinbase;

OKX;

regularly publish Merkle Tree-based Proof of Reserves reports.

Users can independently verify whether their assets are included in the exchanges reserves, and whether reserve coverage exceeds 100%.

This is a form of:

“Decentralized verification.”

Users do not need to trust the exchange.

They only need to trust mathematics.

UPbits approach is different.

It relies on:

“Centralized auditing.”

The exchange hires South Korean accounting firms to conduct periodic audits and publishes reports.

Of course, this is far better than:

“Disclose nothing.”

However, it has two limitations:

1. Audits are snapshots

They only reflect the exchanges financial condition on the audit date.

They cannot provide real-time monitoring.

2. Users cannot independently verify

Users must trust:

the accounting firms;

UPbits internal reporting.

According to assessments from OGAudit and CER.live:

UPbit does not disclose a public user protection fund similar to Binances SAFU.

(Although it maintains internal reserves, the size and structure of those reserves are not fully transparent.)

UPbit has not publicly disclosed penetration testing results (according to CER.live data).

Security incident response reports and Root Cause Analysis (RCA) disclosures are not sufficiently detailed.

Summary:

UPbits reserves can be summarized as:

“Audited, fully covered, and heavily cold-wallet protected.”

Its fundamentals are healthy.

However, the lack of self-verifiable on-chain proof means UPbit falls behind global leaders such as Binance and OKX in terms of transparency.

For Korean domestic users, regulatory oversight and accounting audits may already be sufficient.

But for international users, relying only on audit reports may not provide the same level of confidence.

Risk Rating: Low Risk (Reserve Perspective)

With:

99% cold wallet storage;

frequent PoR verification;

full compensation history after security incidents;

UPbits reserve transparency remains among the strongest in the crypto industry.

However, security vulnerabilities and liquidity concerns still exist.

4. Financial Strength: Nearly $500 Million Annual Profit, But Cooling Comes Fast

UPbits profitability remains impressive.

According to Dunamus 2025 audited financial report (released in March 2026):

A net profit of nearly $500 million annually still places UPbit among the top tier of global crypto exchanges.

For comparison:

• Coinbase generated around $2.8 billion net profit in 2024 (but its scale is much larger);
• Many mid-sized exchanges generate less than $100 million in annual profits.

But the Cooling Effect Came Quickly

In Q1 2026, UPbits profits suffered a dramatic decline:

Revenue: KRW 235 billion, down 55% year-on-year

(previous year: KRW 516 billion);

Operating profit: KRW 88 billion

(previous year: around KRW 396 billion);

Net profit: around KRW 70 billion, down 78% year-on-year

(previous year: around KRW 321 billion).

The direct reason:

Trading volume collapsed.

In November 2025:

UPbits average daily trading volume dropped to approximately:

$1.78 billion

from the 2024 peak of around:

$9 billion.

That represents an approximately:

80% decline.

Trading volume continued falling for four consecutive months, stabilizing within the:

$2 billion–$4 billion range.

In the first half of 2026:

UPbits average daily trading volume declined another:

45.5%

compared with the second half of 2025.

Naver Acquisition: $10.3 Billion Lifeline or New Constraint？

On November 26, 2025:

Naver Financial, the fintech subsidiary of South Korean internet giant Naver, announced a stock-swap merger agreement with Dunamu.

The combined valuation:

Approximately:

KRW 20 trillion (around $13.6 billion).

Strategic goal:

AI + Web3 global expansion;

potential Nasdaq listing.

This became the largest integration between South Koreas technology and crypto industries.

Naver is South Koreas:

“Internet king,”

with ecosystems covering:

search;

e-commerce;

payments;

cloud services.

UPbit is South Koreas:

“crypto king,”

with more than 70% market share.

The combination created enormous expectations.

But the acquisition has been delayed twice:

Original completion plan:

May–June 2026

↓

Delayed to:

September 30, 2026

↓

In July 2026:

Delayed again to:

December 31, 2026

Reason:

Antitrust review has not been completed.

UPbits financial strength remains strong in absolute terms:

nearly $500 million annual profit;

sufficient reserves;

acquisition interest from Naver at a $10.3 billion valuation.

However, the trend is deteriorating:

trading volume collapsing;

profits falling sharply;

acquisition repeatedly delayed.

If the Naver acquisition ultimately fails, UPbit could lose the security of having a major corporate parent behind it.

It would then face:

declining trading volume;

rising compliance costs;

increasing competition.

Risk Rating: Low Risk (Financial Perspective)

UPbit currently faces no solvency risk.

Its profitability and reserves are sufficient to support normal operations.

However:

If:

the Naver acquisition fails;

trading volume continues shrinking;

Another major security incident occurs;

long-term risks could increase significantly.

5. Internal Operations and Team: From Startup Founder Era to Corporate Giant Control

Founders: South Koreas Self-Made Crypto Entrepreneurs

Song Chi-hyung and Kim Hyoung-nyon founded Dunamu in 2012 and launched UPbit in 2017.

Through deep integration with KakaoTalk, UPbit rapidly became South Koreas largest cryptocurrency exchange.

In 2025, both founders became billionaires through the Naver stock-swap merger.

After the merger:

Although Song Chi-hyung and Kim Hyoung-nyon retained management influence, major strategic decisions would require reporting to Naver.

Is this good or bad for users？

Positive:

Naver is a publicly listed Korean technology company.

It is unlikely to allow a subsidiary to operate recklessly.

Negative:

Navers core businesses are:

internet;

payments;

technology.

Crypto exchange operations are not its primary focus.

If Naver decides crypto is no longer profitable, UPbit could become a lower-priority business.

CEO Change: A Yellow Flag

On July 1, 2025:

Lee Sirgoo, UPbit‘s CEO for eight years and the person widely credited with transforming UPbit from a startup into Korea’s largest exchange, suddenly stepped down.

He cited health reasons.

A CEO transition itself does not necessarily indicate danger.

However, the timing is notable:

regulatory penalties were ongoing;

market competition was intensifying;

security concerns were increasing.

Therefore, the leadership change naturally triggered speculation about possible strategic disagreements.

Risk Rating: Low Risk (Team Perspective)

A leadership change alone will not cause an exchange collapse.

Chairman Song Chi-hyung remains in place, providing stability.

However, if after the Naver acquisition:

new executives continue leaving;

key technical teams depart;

strategic uncertainty increases;

Users should pay closer attention.

6. Product Experience and Trading Depth: A “Home Court Dragon,” but a “Foreign Court Worm”

UPbits KRW (Korean Won) trading pairs are its biggest competitive advantage.

According to data from South Koreas Financial Supervisory Service (FSS), UPbit accounted for 71.6% of domestic crypto trading volume in South Korea during the first half of 2025.

Other data sources estimate its market share between 72% and 78%.

It is, without question, the dominant player in the Korean market.

The KRW market trading fee is only 0.05%, making it one of the lowest fiat trading fees globally.

UPbit supports:

955 markets

437 cryptocurrencies

On August 22, 2026:

The daily trading volume of the XRP/KRW pair reached $319 million, accounting for 21.86% of UPbits total trading volume.

The order book depth of UPbits KRW market is unmatched.

Globally, UPbits spot trading volume usually ranks between 4th and 6th place among cryptocurrency exchanges.

Its average daily spot trading volume is approximately:

$2 billion–$4 billion.

However, UPbit is a pure spot exchange.

It does not offer:

Futures contracts;

Margin trading;

Options;

Other derivative products.

This is relatively rare among top global exchanges.

Platforms such as:

Binance;

OKX;

Bybit;

generate a significant portion of their revenue from derivatives trading.

XRP: The Most Unique Phenomenon on UPbit

The most distinctive feature of UPbit is the dominant position of XRP.

According to UPbits official data:

In 2025, XRP trading volume on UPbit exceeded:

$1 trillion annually.

It surpassed Bitcoin and Ethereum to become the most traded asset on the platform.

XRP‘s share of UPbit’s daily trading volume has remained between:

15% and 22%.

During the peak period in July 2025:

Daily XRP trading volume reached:

$1.22 billion.

This “XRP obsession” is a unique phenomenon in the Korean market.

Korean retail investors have a particularly strong preference for XRP.

It is often considered part of the so-called:

“Kimchi Premium” phenomenon.

The liquidity of the XRP/KRW trading pair on UPbit is among the deepest in the world.

The Problem: UPbit Is Designed for Korea, Not the World

South Korean regulations restrict domestic crypto exchanges from allowing KRW trading only to verified Korean citizens.

This means:

Non-Korean users cannot actually access UPbits core advantage:

KRW trading pairs.

They can mainly use:

BTC pairs;

USDT pairs;

with more limited functions and restrictions.

The KYC process can also be extremely complicated.

Withdrawals may face prolonged reviews.

The reality is:

UPbit is essentially a South Korean domestic exchange.

International users are more like:

“additional customers.”

In summary:

UPbit is a typical:

“home court dragon, foreign court worm.”

Inside South Korea:

trading depth is excellent;

user experience is strong;

brand recognition is unmatched.

Internationally:

global influence is limited;

non-Korean user experience declines significantly.

This dependence on a single market is a double-edged sword.

When the Korean market remains stable:

UPbit enjoys extremely healthy cash flow.

But if South Korea experiences:

regulatory changes;

user migration;

market decline;

UPbit lacks a strong “second growth engine” to offset the impact.

Risk Rating: Medium Risk (Product Perspective)

If you are a Korean user:

UPbit provides an excellent experience.

If you are not Korean:

Prepare for:

“hell-level” KYC;

potentially lengthy withdrawal reviews.

7. Community Feedback: Extreme Polarization

Korean Users: Generally Satisfied

Korean users generally rate UPbit positively.

Reasons include:

low fees;

deep liquidity;

integration with KakaoTalk ecosystem.

UPbit controls more than 70% of South Koreas crypto trading volume.

If Korean users truly considered it a scam, it would be impossible for UPbit to maintain this market dominance.

However, UPbits Trustpilot score of:

1.6/5

mainly comes from overseas users.

Complaints focus on:

account freezes;

withdrawal difficulties;

extremely complicated KYC;

almost nonexistent customer support;

requests for “unlock fees.”

UPbits community reputation can be summarized as:

“Koreans love it, foreigners hate it.”

This does not necessarily mean UPbit is a bad company.

Rather:

UPbit was never designed primarily for international users.

Its target market is South Korea.

Foreign users are simply allowed to register.

But when problems occur:

Do not expect the same level of support.

Risk Rating: Medium Risk (Community Perspective)

UPbits reputation among Korean users is strong.

However:

A 1.6 Trustpilot score and numerous “scam” accusations from overseas users cannot simply be ignored.

For non-Korean users, this risk is real.

8. Overall Exit Risk Assessment

Overall Rating: Low Exit Risk

The probability of UPbit suddenly disappearing is extremely low.

Why？

Because it has:

a South Korean VASP license;

Naver and Samsung ecosystem support;

billionaire founders;

top-tier global trading volume.

This is not the type of exchange that simply “runs away.”

However:

“Not running away” does not mean “zero risk.”

UPbits biggest risks are:

1. Regulatory Uncertainty

Although the FIU penalty was overturned by the court:

FSS sanction procedures are still ongoing;

license renewal remains uncertain.

The regulatory situation requires continued monitoring.

2. Security Vulnerabilities

UPbit was attacked twice by the Lazarus Group:

2019;

Six years, two major incidents.

The question is:

When will the next one happen？

3. Overseas Users Being Neglected

Trustpilots 1.6 rating is not meaningless.

If you are not Korean:

Your money may enter UPbit easily,

but getting it out could become difficult.

4. Trading Volume Collapse

Trading volume dropped from:

$9 billion → $1.78 billion daily.

The Korean crypto market is cooling down.

UPbits “golden era” may already be fading.

9. Recommendations for New and Existing Users

For New Users

If you are Korean:

UPbit remains one of the safest choices in South Korea.

Advantages:

low fees;

deep liquidity;

regulated operation.

If you are not Korean:

Consider carefully.

Potential issues:

complicated KYC;

withdrawal reviews;

limited customer support.

There are many global exchanges that provide a better experience for international users.

If you still decide to use UPbit:

Be prepared:

KYC may require bank documents and physical statements;

Withdrawals may be reviewed for weeks or even months.

Start Small

Before depositing large amounts:

Complete a full test cycle:

Deposit → Trade → Withdraw

Confirm the process works before increasing your funds.

For Existing Users

Korean Users:

Continue using it if it fits your needs.

However:

Monitor regulatory developments.

The FSS sanction outcome could affect future operations.

Overseas Users:

Review your exposure.

If funds stored on UPbit exceed:

10% of your total assets,

consider gradually moving assets to exchanges with stronger international support.

Test a Withdrawal Now

A successful withdrawal means:

the platform is functioning normally.

A failed withdrawal means:

you discovered the problem early.

Watch Security Risks

The Lazarus Group has already targeted UPbit twice.

Keep the majority of long-term assets in:

hardware wallets;

personal cold storage.

Do not store everything on an exchange.

Final Recommendation

Who is UPbit suitable for？

Korean users.

Because:

low fees;

deep liquidity;

regulatory compliance.

It remains the leading choice in South Korea.

Who is UPbit not suitable for？

Non-Korean users.

Because:

complicated KYC;

possible withdrawal delays;

limited customer support.

For international users, the experience can feel close to “hell.”

UPbit is not a scam.

But it is also not truly a “global exchange.”

It is:

a Korean domestic exchange that happens to allow foreigners to register.

Next Episode Preview:

WikiBit Exchange Exit Risk Ranking #8 — Azbit Exchange

Stay tuned.

Risk Disclaimer:This article represents personal analysis only and does not constitute investment advice. Cryptocurrency investment involves risks. Please conduct your own research before making any investment decisions.

Information updated: August 25, 2026. Please verify the latest information from multiple sources before making decisions.