Emergency audit after the Upbit hack reveals internal wallet flaw

  • Upbit patched a wallet flaw after a $30M Solana-related hack.
  • Withdrawals were halted, and stolen funds were partly frozen following the attack.
  • Authorities probe possible Lazarus Group involvement.

South Korea’s largest cryptocurrency exchange, Upbit, has revealed a serious internal wallet vulnerability while conducting an emergency audit in the wake of a $30 million hack.

The discovery comes as the company continues to investigate irregular Solana-based withdrawals that triggered the security review, raising concerns about potential risks to private keys within the platform’s wallet system.

Flaw discovered after emergency audit

The emergency audit, launched following the detection of abnormal activity on Nov. 26, uncovered a flaw in Upbit’s internal wallet software that could allow attackers to mathematically derive private keys by analysing blockchain transactions.

CEO Oh Kyung-seok, in a published announcement after the audit, explained that while blockchain data is normally public but secure, the company’s own wallet implementation produced weak and predictable signature data, creating the theoretical risk.

Upbit emphasised that the flaw was discovered only after the systemwide review and did not appear to be directly linked to the hack itself.

The exchange has since patched the vulnerability and conducted a comprehensive inspection of all related networks and wallet systems to ensure no further weaknesses remain.

Upbit to cover all losses using its own reserves

The Upbit hack, which resulted in losses totalling roughly 44.5 billion KRW, including approximately 38.6 billion KRW in customer assets, prompted immediate action from the exchange.

Withdrawals were suspended, and remaining assets were moved to cold storage to prevent further losses.

About 2.3 billion KRW of the stolen funds, equivalent to around $1.5 million, has already been frozen.

Oh Kyung-seok described the situation as a reminder that no security system can be considered completely infallible.

Kyung-seok has assured customers that Upbit would cover all losses using its own reserves and pledged to strengthen security measures across the platform.

The exchange has committed to resuming deposits and withdrawals only after the final verification of its wallet systems.

South Korean authorities are investigating the hack

South Korean authorities have launched an investigation into the incident, with early intelligence reports pointing to potential involvement by the North Korea-linked hacking group Lazarus.

While Upbit and regulators have not publicly confirmed this, the company continues to collaborate with law enforcement and blockchain projects to recover and freeze stolen assets wherever possible.

The incident has prompted Upbit to conduct a broader security review of its entire infrastructure.

The exchange noted that irregular withdrawals from Solana-related wallets, including tokens such as ORCA, RAY, and JUP, served as a catalyst for the emergency audit and subsequent vulnerability discovery.

By conducting a full overhaul of wallet systems, Upbit aims to prevent similar breaches in the future.

The post Emergency audit after the Upbit hack reveals internal wallet flaw appeared first on CoinJournal.

Bitcoin cash holds above $500 as whales accumulate; analysts eye potential rally

  • Bitcoin Cash (BCH) is well above the $500 threshold amid broader market fluctuations.
  • This resilience signals potential confidence in potential to bounce higher.
  • As the Bitcoin price rises above $92,000, what lies ahead for BCH?

Bitcoin Cash is trading at near $539, just in the green on the daily chart, and counting a modest $562 million in daily volume. The token, a fork of Bitcoin, crucially remains above the pivotal $500 mark.

The BCH token’s price stability comes after a period of consolidation, but can bulls take control of the situation?

In the past 24 hours, altcoins like Monero have soared to lead gainers.

As highlighted, XMR price has jumped in contrast to the downward action for Zcash. Bitcoin ecosystem tokens also surged as BTC price recovered to near $92,000 earlier in the day.

What’s bullish for Bitcoin Cash?

Bitcoin Cash traded at lows of $258 in April, but a steady climb amid overall bullish market sentiment saw BCH hit highs of $650 in September. While price has traded lower since, bulls managed to break higher off support in mid-October.

Several factors, such as Bitcoin’s rally and BCH adoption across payments, helped bulls.

Further network activities have bolstered Bitcoin Cash, in particular, smart contract capabilities, attracting developers and fostering ecosystem growth.

Institutional interest has also played a role.

Overall, buzz around spot exchange-traded funds approvals in key jurisdictions has funneled fresh capital into altcoins. BCH has thus remained mostly bullish despite macroeconomic uncertainty, including the US Federal Reserve rate cut.

Markets rebounded this week as top central bank officials urged the Fed to cut rates in December.

The price of Bitcoin and altcoins, including Bitcoin Cash, could surge as a result. Notably, cryptocurrencies gained as the US Dollar index risked further weakness on Friday.

BCH price forecast

On the daily chart, the Relative Strength Index (RSI) is at 53, suggesting neutral momentum.

The indicator aligns with potential room for upward mobility given a bullish divergence. Importantly, Bitcoin Cash’s perch above $500 reflects its foundational strengths. As such, market synergy could see BCH price eye more gains.

Bitcoin Cash Price Chart
Bitcoin Cash price chart by TradingView

According to crypto analyst CW, whales have been busy around current BCH prices, and this could signal upcoming momentum.

“$BCH whales are preparing something,” the analyst posted on X. “Signals of a recent holdings exchange have been observed repeatedly. Just 3 hours ago, over 140k $BCH were traded in 1 hour.”

The analyst added:

“Whales are exchanging hands in the $525-$550 range. Once this process is complete, a full-scale rally [could] begin.”

 

The post Bitcoin cash holds above $500 as whales accumulate; analysts eye potential rally appeared first on CoinJournal.

KuCoin secures MiCA license in Austria, expands regulated crypto services across Europe

  • KuCoin EU gets MiCA license to operate across 29 EEA countries, excluding Malta.
  • Austria was chosen for its stable regulations, timely MiCA implementation, and talent pool.
  • License strengthens compliance and global expansion strategy for KuCoin.

Global cryptocurrency exchange KuCoin has taken a significant step toward expanding its presence in Europe with its European arm, KuCoin EU, securing a Markets in Crypto-Assets (MiCA) license from Austria’s Financial Market Authority.

This approval marks a major milestone for the exchange, allowing it to operate regulated crypto services across 29 countries in the European Economic Area (EEA), although Malta remains an exception.

Austria as a strategic hub

KuCoin’s decision to pursue licensing in Austria comes amid a wave of European countries adopting MiCA regulations, designed to standardise crypto oversight and enhance consumer protections.

Vienna, in particular, has emerged as an attractive base for crypto companies due to its timely implementation of MiCA’s accompanying laws, a predictable regulatory environment, and a robust talent pool.

KuCoin EU’s license positions the company among six cryptocurrency service providers authorised by Austria’s FMA, alongside established names such as Bitpanda, Bybit, and Amina Bank.

The MiCA framework, which came into effect in late 2024, enables crypto companies to obtain a license in one member state and “passport” their services across the wider EEA.

For KuCoin, this means the ability to offer regulated digital asset services, including stablecoins and other crypto-asset offerings, throughout much of Europe while adhering to one of the most comprehensive regulatory regimes worldwide.

The license also brings clear obligations for transparency, supervision, and consumer protection, with non-compliant entities facing penalties or license revocations.

Strengthening global compliance

KuCoin’s MiCA approval coincides with its recent registration with Australia’s financial intelligence agency, Austrac, allowing the exchange to offer crypto services legally in the country.

The timing underscores the company’s broader strategy of combining global expansion with regulatory compliance.

KuCoin CEO BC Wong described the MiCA license as a “defining milestone” for KuCoin’s long-term trust and compliance strategy, emphasising that regulatory adherence is not merely a legal requirement but the foundation of the company’s mission to deliver secure, innovative, and accessible digital asset services.

However, while the MiCA license allows operations across the majority of the EEA, Malta remains excluded due to its independent approach toward MiCA supervision.

Malta has issued multiple licenses to other cryptocurrency service providers, including Blockchain.com and Gemini, yet it has often opposed centralised EU oversight, highlighting differing regulatory philosophies within Europe.

KuCoin is setting a benchmark for the region

KuCoin’s entry into the European market under MiCA signals growing confidence in the regulatory framework and demonstrates the increasing alignment of major crypto platforms with formal compliance standards.

With a user base exceeding 40 million across 200 countries, KuCoin’s European arm is now equipped to expand its regulated services while maintaining high standards for transparency, security, and consumer protection.

The post KuCoin secures MiCA license in Austria, expands regulated crypto services across Europe appeared first on CoinJournal.

TRON price prediction as TRX hits $0.28 resistance

  • TRON price hovers above $0.28, largely unchanged in the past week.
  • Despite the consolidation, TRX looks poised to go higher.
  • Recent network developments, including stablecoin growth and partnerships, buoy bulls.

TRON (TRX) has shown limited upward momentum in recent sessions but continues to hold near the key $0.28 level, even as volatility across the crypto market keeps investors cautious.

TRX is trading around $0.28 after a modest 0.4% dip over the past 24 hours, reflecting broader market weakness and a lack of clear direction.

Sentiment remains fragile following Bitcoin’s slide to $80,000 last week before rebounding toward $92,000, a move that has kept traders on edge.

Still, TRON has managed a mild recovery from recent lows near $0.27, offering a tentative sign of strength despite the uncertain backdrop.

What could aid the TRX price?

The question of whether Tron could ignite a parabolic rally arises from TRON DAO’s growth and expansion across the market.

For instance, TRON has dominated the stablecoin market in terms of total transfers year-to-date. USDT supply on TRON surpassed $80 billion in July.

Leo Chan, a small business owner in Asia, recently highlighted why TRON is seeing huge adoption in stablecoins.

“When I need to make payments at traditional banks, I need to do some paperwork,” Leo said. “I may face delays and lose business. With TRON, recipients can instantly get the payment.”

While it sits above peers in global USDT activity, 2025 also boosts many other notable feats, including daily active users and integrations.

Platforms such as Chainlink and MetaMask have helped elevate TRON’s reach, expanding access beyond stablecoin transfers into decentralized finance, tokenized assets and retail payments.

In terms of adoption, the latest data shows TRON’s total accounts have surpassed 346 million.

This ecosystem growth speaks to rapid growth amid an explosion in decentralized finance.

Recently, TRON’s DeFi arm, TRONBANK, secured $10 million in funding.

The strategic financing will help accelerate lending and staking innovations, likely bolstering total value locked in the protocol.

Tron rice prediction

TRON’s price outlook remains cautiously optimistic despite recent dips.

Notably, upside projections hinge on network adoption and macroeconomic shifts.

If bulls gain, the next targets could be $0.35 and $0.50.

TRON Price Chart
TRON price chart by TradingView

With a market cap exceeding $26 billion, TRX ranks as the eighth-largest cryptocurrency by market cap.

The token has seen over $535 million in intraday trading volume.

Bulls saw the token touch the all-time high of $0.44 in December 2024.

Technical indicators add fuel, such as a double-bottom pattern formed in early November, which signals a potential reversal from bearish depths.

As can be seen on the chart above, TRX has rebounded slightly but remains within a downtrend.

RSI is below 50  but suggesting an uptick, as is the MACD on the daily chart, indicating a potential bullish crossover.

The post TRON price prediction as TRX hits $0.28 resistance appeared first on CoinJournal.

Balancer unveils $8M reimbursement plan for LPs after the $128M V2 exploit

  • Balancer will return $8M to affected liquidity providers after the V2 exploit.
  • Whitehat and internal teams recovered part of the stolen $28M.
  • Reimbursements will be distributed pro rata in the same tokens via a 180-day claim.

Decentralised finance protocol Balancer has unveiled a plan to reimburse liquidity providers (LPs) following the massive exploit that drained over $128 million from its V2 pools.

The reimbursement plan comes after an extensive recovery effort led by whitehat hackers and internal teams, aiming to restore funds and rebuild trust within the platform’s user community.

The plan has been submitted to the Balancer DAO for community feedback and will require approval through a formal voting process before distribution begins.

The Balancer exploit

The Balancer exploit, which occurred in early November, targeted a rounding function flaw in Balancer’s Composable Stable Pools (CSPv5).

Attackers combined this vulnerability with batched swaps, allowing them to manipulate token price calculations and drain multiple pools across Ethereum, Polygon, Base, and Arbitrum.

Despite 11 previous security audits conducted by four different blockchain security firms, the vulnerability went unnoticed.

The breach sent shockwaves through the DeFi sector, causing Balancer’s total value locked to fall from $775 million to $258 million, while its native BAL token lost roughly 30% of its value.

Portions of the protocol were paused immediately after the attack to prevent further losses, while whitehat and internal recovery operations began working to salvage funds.

Recovery efforts and whitehat contributions

Overall, approximately $28 million of the stolen funds was recovered.

Whitehat hackers played a significant role, reclaiming around $3.9 million, while internal Balancer teams, including coordination with security firm Certora, retrieved another $4.1 million from vulnerable metastable pools that had not yet been exploited.

Among the whitehat contributors, an anonymous actor dubbed “Anon #1” recovered $2.68 million on Polygon, including various tokens such as WPOL, MaticX, TruMATIC, and stMatic, as detailed in the unveiled reimbursement proposal.

Some rescuers on Arbitrum declined to identify themselves and waived their bounty claims, highlighting the voluntary and community-driven nature of these recovery efforts.

The remaining $19.7 million in osETH and osGNO tokens was recovered through StakeWise, an Ethereum liquid staking protocol, and will be returned to users via StakeWise’s own governance mechanisms.

The $8M reimbursement plan

Balancer’s reimbursement plan focuses on the $8 million recovered directly by whitehats and internal teams.

The framework adopts a non-socialised approach, meaning funds are returned only to liquidity providers in the specific pools affected.

Reimbursements will be distributed on a pro-rata basis according to each user’s Balancer Pool Token holdings at a snapshot block taken before the exploit.

Payments will be made in-kind, allowing users to receive the exact tokens that were stolen, avoiding any mismatches or unintended losses due to price fluctuations.

Whitehat contributors are entitled to a 10% bounty of the recovered funds, capped at $1 million per operation.

To receive their reward, Whitehat participants must complete identity verification, KYC, and sanctions screening under Balancer’s SEAL Safe Harbour Agreement.

Notably, internal recovery operations, including Certora’s involvement, are excluded from these bounties due to pre-existing service agreements.

If the distribution plan is approved, affected liquidity providers will have a 180-day window to claim their funds, during which they must digitally accept Balancer’s updated terms of use.

These terms require users to release Balancer Labs, the DAO, the Foundation, and affiliated parties from legal liabilities related to the exploit.

Unclaimed funds after 180 days will be considered dormant and may only be reallocated through a governance vote.

The post Balancer unveils $8M reimbursement plan for LPs after the $128M V2 exploit appeared first on CoinJournal.