South Korea launches sanctions probe against Upbit operator Dunamu

The FSS recently issued an inspection opinion letter to Dunamu, granting the company a window to contest findings before regulators determine potential penalties. This move follows an exhaustive review of the security lapse that saw Solana-based assets siphoned from the platform. While Upbit moved to reimburse affected users with corporate funds and overhauled its wallet infrastructure, authorities are scrutinizing the timing of the exchange's public disclosure and its internal security protocols.

Regulatory path forward remains complicated by a distinct lack of explicit legal penalties for hacking incidents within current South Korean law. The existing Virtual Asset User Protection Act covers custody and unfair trading, but it provides little guidance on punishing systemic infrastructure failures. Consequently, the FSS must navigate a complex multi-stage review process involving the sanctions committee and the Financial Services Commission to determine if any enforcement action can be sustained.

This inquiry compounds existing pressure on Dunamu, which has previously tangled with regulators over anti-money laundering and customer verification compliance. A prior 35.2 billion won fine was challenged in court, highlighting the growing friction between traditional regulatory oversight and the evolving digital asset landscape. As the firm manages this latest challenge alongside a delayed share swap deal with Naver Financial, the case serves as a critical test of how far existing statutes can stretch to govern exchange operations in the absence of specialized cybersecurity legislation.