Analysis: Upbit may have been infiltrated by advanced persistent threat organizations for a long time

PANews reported on November 28 that security firm GoPlus analyzed the recent Upbit attack and pointed out several serious issues: the hot wallet leak indicates vulnerabilities in key management and security risks within the internal network. The cold wallet remains secure. Noteworthy aspects of this incident include: 1. "Anniversary attack"—the attack occurred on the same day as the $50 million hack six years ago in 2019; 2. Well-timed execution—the attack was launched just hours after the major merger announcement between Dunamu and Naver; 3. Typical characteristics of the Lazarus group—attack speed, methods, and symbolic significance; 4. Complex money laundering techniques—using multiple DEX routes, possibly to evade regulation (2,200 SOL tokens were transferred to Binance). All signs suggest that the platform may have been subject to long-term infiltration by an advanced persistent threat (APT) group.

Previously, Upbit disclosed that approximately 54 billion KRW worth of Solana network assets had been stolen; South Korean authorities suspect that the North Korean hacker group Lazarus is behind this attack.

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

Interview with VanEck Investment Manager: From an Institutional Perspective, Should You Buy BTC Now?

The support levels near $78,000 and $70,000 present a good entry opportunity.

Macroeconomic Report: How Trump, the Federal Reserve, and Trade Sparked the Biggest Market Volatility in History

The deliberate devaluation of the US dollar, combined with extreme cross-border imbalances and excessive valuations, is brewing a volatility event.

Vitalik donated 256 ETH to two chat apps you've never heard of—what exactly is he betting on?

He made it clear: neither of these two applications is perfect, and there is still a long way to go to achieve true user experience and security.

Prediction Market Supercycle