South Korean prosecutors have reportedly intensified legal action against Dunamu, the operator of cryptocurrency exchange Upbit, as authorities revisit the company’s handling of the 2019 security breach that resulted in the loss of approximately 342,000 ETH. The renewed focus has also highlighted regulatory gaps that existed before the country’s comprehensive digital asset laws came into effect.
The investigation centers on whether existing laws at the time of the hack provided regulators with sufficient authority to hold virtual asset service providers accountable for security failures and investor protection. According to local reports, prosecutors are examining whether Dunamu fulfilled its legal obligations following the attack and whether stronger enforcement measures could have been applied under the current regulatory framework.
In November 2019, Upbit disclosed that hackers had stolen around 342,000 Ether, valued at roughly $50 million at the time. Despite the breach, the exchange stated it would fully compensate affected users using its corporate reserves rather than customer assets. The incident became one of the largest crypto exchange hacks involving a South Korean platform and drew significant attention from regulators and lawmakers. The exchange later replenished customer balances while strengthening its internal security systems.
Although customer funds were ultimately restored, the case exposed shortcomings in South Korea’s legal framework for digital asset businesses. At the time, cryptocurrency exchanges operated under relatively limited oversight compared to traditional financial institutions, leaving regulators with fewer enforcement tools when major security incidents occurred.
The legal landscape has changed considerably since then. South Korea introduced the Virtual Asset User Protection Act (VAUPA), establishing clearer compliance requirements for exchanges, including customer asset segregation, reserve management, cybersecurity standards and incident reporting obligations. The legislation aims to improve investor protection while providing regulators with broader supervisory authority over crypto service providers.
Legal experts cited in local coverage argue that the renewed scrutiny surrounding Dunamu illustrates how historical incidents continue to shape the interpretation of newer digital asset regulations. While the 2019 hack occurred before many of today’s rules were enacted, authorities are assessing whether existing laws were adequately enforced and whether legal accountability could still apply in certain areas.
The case also reflects South Korea’s increasingly strict approach toward cryptocurrency oversight. The country has built one of the world’s most active digital asset markets, with exchanges operating under detailed licensing, anti-money laundering and banking requirements. Regulators have continued expanding supervision as crypto adoption grows among retail and institutional investors.
Upbit remains the country’s largest cryptocurrency exchange by trading volume and continues to play a significant role in South Korea’s digital asset ecosystem. Operated by Dunamu since its launch in 2017, the platform has maintained its market leadership despite facing multiple regulatory reviews over the years.
The renewed legal attention comes as South Korean authorities pursue broader reforms aimed at strengthening oversight of virtual asset service providers. Officials have repeatedly stated that investor protection and exchange accountability remain priorities following several high-profile industry failures globally.
While the current investigation does not alter the compensation previously provided to Upbit users, it could influence how future enforcement actions are handled when exchanges experience cybersecurity incidents. Legal observers suggest the outcome may help clarify the responsibilities of crypto platforms under South Korea’s evolving regulatory framework and establish precedents for future cases involving digital asset security.
The case underscores how historic crypto security breaches continue to shape regulatory policy years after the initial incident, particularly as governments seek to balance innovation with stronger consumer protections in the rapidly evolving digital asset industry.
