Incident All ledgers
Upbit: $36.0m
Upbit lost $36.0m on 26 November 2025. Ranked 91st of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 26 November 2025
- Lost
- $36.0m
- Returned or repaid
- None recorded
- Target
- CEX
- Category
- Social Engineering
- Method
- Malware
- Chains
- Solana
Upbit's hot wallet was emptied of about $36M in Solana-based tokens over 54 minutes on November 27, 2025. The attacker took advantage of weak signature infrastructure that let private keys be derived from on-chain transaction history.
Against the ledger
- It ranks 91st of the 1,272 incidents with a known loss, and 13th in 2025.
- It accounts for 20.0% of the $179.7m in known losses in November 2025.
- 61 incidents in the ledger are classified as Social Engineering, for $3.12bn in total. This one is 1.2% of that.
- The ledger records no returned funds.
Other incidents named Upbit
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 27 Nov 2019 | Upbit | $49.3m | CEX | Hot Wallet Key Compromised | — |
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 18 Jun 2025 | Nobitex | $82.0m | CEX | Malware | — |
| 19 Apr 2021 | EasyFi | $59.0m | DeFi Protocol | Malware | — |
| 05 Nov 2021 | Ooki | $55.0m | DeFi Protocol | Phishing | — |
| 16 Oct 2024 | Radiant V2 | $50.0m | DeFi Protocol | Blind Signing | — |
| 22 Jul 2023 | CoinsPaid | $37.3m | Other | Impersonation Scam | — |
All failures in 2025 · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Upbit, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/upbit-2025-11-26/. How this is built