| KOREA SIGNAL | by Holo Hive |
Binance loses ~$6.3B in a hot-wallet hack. FBI names North Korea. FSC calls an emergency meeting on exchange security.
Binance hot wallets were drained from about 05:24 KST on October 30 across nine to ten chains, with losses of roughly $6.3B (about 18,270 BTC, 466K ETH and stablecoins). Tether froze about 1.57B USDT and Circle about $823M in USDC, roughly $3B frozen in total. Binance's preliminary cause was a compromised engineer laptop, with no evidence of a key leak. It set aside about $6.34B of company funds, reported 90% of losses covered on October 31 and 95% on November 1, reopened withdrawals in phases from November 1, and launched a community campaign with a 20M USDC pool. The FBI named North Korea's TraderTraitor group on October 31–November 1.
On November 2, the FSC held an emergency meeting with the FSS, the Financial Security Institute, DAXA and major exchanges, checking access control, hot-wallet withdrawal approval and signing, and admin permissions. Exchanges were asked to raise cold-wallet ratios above the existing 80% legal minimum, monitor flows around the clock, and add staff and reserves. Upbit, Bithumb, Coinone and DigitalX each posted caution notices on withdrawals to Binance. Seoul Economic Daily reported that Upbit USDT trading value jumped about 27x within an hour around 05:00 KST on October 30, with USDT briefly trading about 1.16% above offshore prices. Community tracking showed the kimchi premium peaking around 1.4% at the hack and easing to about 0.2% by November 2. Community channels split on custody: some moved funds to Upbit and Bithumb as psychologically safer, others argued large exchanges that reimburse are safer than self-custody, and the debate over stablecoin freeze powers sharpened.
NTS guidance put on hold at the ruling party's request. DP meets the five exchange CEOs. Decision expected at a party-government meeting around November 8.
There is still no formal decision, and the tax remains legally scheduled for January 1, 2027 (22% above ₩2.5M). The Democratic Party is converging on a delay of about two years or on linking the start to the Digital Asset Basic Act. On October 28, a party-government meeting with DP leader Kim Min-seok, finance committee chair Cho Seung-rae and Deputy PM Lee Hyung-il reached no conclusion but agreed on the principle of taxation. Open issues were fairness versus offshore exchanges, IT readiness, overseas data, derivative classification and loss carry-forward. The party then asked the government to hold the NTS tax notice, which had been due October 30, until the party decides, and the government agreed.
On October 30, the DP met the five exchange CEOs on tax-data submission systems and access to overseas trading data, and the exchanges asked for deferral. Rep. Oh Ki-hyung said a decision would come "within one to two weeks" and "by end-November at the latest." At a November 2 forum at the National Assembly Library, Rep. Min Byung-deok said "now is the time to defer," Rep. Park Min-gyu warned that rushing would drive users abroad and shrink the tax base, and Rep. Lee Kang-il said the government's Basic Act bill will arrive in November, with the aim of passing it this year or in January–February 2027. The DP high-level party-government meeting, with the presidential office, is expected around November 8. On November 3, DP finance committee members reportedly agreed to recommend deferral to party leadership, with most mentioning around two years. Any bill would need to pass by the end of November.
A new wrinkle: Maeil Business reported on November 2 that the finance ministry will classify US-stock-linked perpetual futures on offshore crypto exchanges as overseas-stock derivatives, taxed at 11% from 2027 after a ₩2.5M deduction. Community reaction read it as de facto recognition of offshore venues while futures remain barred on Korean exchanges, with some expecting retail to move further offshore.
Bithumb discloses a groupware breach exposing customer and employee data. Prosecutors search its headquarters on an unrelated case.
An outsider accessed Bithumb's internal mobile groupware on October 27, with disclosure on October 28. The FSC, FSS and Financial Security Institute began an on-site inspection that day and pledged full compensation if users are harmed. The presidential National Security Office held an emergency meeting the same day, also covering breaches at Daishin Securities and Mirae Asset. Bithumb's October 29 notice and apology put the count at 6,444 customers (5,600 encrypted and 844 with readable data, including name, phone, resident registration number, driver's licence, account number and ID copy) plus 715 employees. Exchange accounts and asset data were reported as separate and not breached.
On October 29, the Seoul Southern District Prosecutors' Office searched Bithumb's headquarters over company-funded housing for current and former executives, a case unrelated to the breach. The week's incidents follow the FIU sanction case, the VIP card scrutiny and the community backlash over listing quality, and the leaks across Korean finance raise targeted voice-phishing risk for exchange users.
Basic Act bill still due in November, with passage this year uncertain. FIU refers three more unregistered operators. BOK weighs narrowing its holder-reporting scope.
The government's Digital Asset Basic Act (phase two) bill has not been submitted; Rep. Lee Kang-il says it will come in November. Money Today reported that passage this year is uncertain, that the cap on major-shareholder stakes in exchanges is still disputed, and that exchange no-fault hack liability may be added after the Binance incident. The "banks 50% + 1 share" stablecoin issuer model agreed between the Bank of Korea and the government at the October 12 audit saw no new resolution this week.
On October 30, the FIU referred three more unregistered operators for investigation, bringing referrals to 47, and requested access blocks for two. The FSC stressed that only the 28 FIU-registered exchanges are legal and that referral activity can count as aiding unregistered business. On the Bank of Korea's cross-border reporting regime due December 3, after privacy criticism the BOK is discussing narrowing the month-end balance reporting to users with transfers after the law takes effect, rather than since July 2024; the final form is due in November. KRX, KSD, KSFC and Koscom also published a roadmap to T+1 settlement around 2028.
KOSPI whipsaws on chip earnings, with SK Hynix's ₩100T shareholder-return plan. BTC slides to the mid-$70Ks. FOMC holds with two dissents for a hike.
KOSPI jumped 3.09% on October 27 and 6.63% to 6,012.44 on October 28, with buy sidecars on both days, then fell 1.24% on October 29 and 3.48% to 5,730.74 on October 30, when foreigners net sold ₩1.617T and a sell sidecar triggered after Intel fell sharply and the SOX dropped 7.2%. It closed at 5,859.08 on November 2. SK Hynix's third-quarter results on October 28 showed revenue of ₩104.6T and operating profit of ₩83.3T, with about ₩100T of FY2026 shareholder returns (dividends over ₩30T, buybacks and cancellations over ₩60T) and a new ₩20T buyback. Samsung reported record operating profit of ₩107.44T on October 29 but fell about 4% on the call. Korea's Q3 GDP grew 1.0% quarter-on-quarter, above the 0.8% consensus, and annual exports passed $1T for the first time.
BTC traded around $79.7K on October 27, $81.5K on October 28 and $77.8K on October 30, with an intraday low near $76.3–76.5K on October 31, and was at about $78.1K on November 2. October closed down 7–8%, the second straight red October. ETH ranged $2,222–$2,311. The FOMC held at 3.75–4.00% on October 29 in a 10–2 vote, with two members dissenting in favour of a hike. USD/KRW moved from about 1,323 (a two-year low on October 28) to about 1,344 on November 2. Community channels reported a fearful, then numb mood, with the Fear and Greed Index down to 30 and a common view that stocks are now more volatile than coins. Energy rotated toward Korean chip stocks, US stocks, IPO subscriptions, stablecoin yield and perp-DEX farming, though farming fatigue is rising.
Shinhan Card runs a wallet-to-wallet token pilot on GIWA. Hanwha partners with Chainlink. Mirae Asset's US arm joins DTCC's tokenised securities service.
Shinhan Card and Dunamu's GIWA chain ran the first card-company wallet-to-wallet token-payment pilot (Shinhan-issued tokens, QR payment in GIWA Wallet, employees only), aimed at commercial launch after legislation. Hanwha Investment and Securities announced a partnership with Chainlink on October 30 for a global digital-asset and RWA platform using CCIP, with a joint working group. Mirae Asset's US arm is one of 20 participants in DTCC's tokenised securities service, which launched on October 28. On the community side, Hyperliquid was the week's standout: ICE, the parent of the NYSE, made a strategic investment in trade[XYZ] to bring Hyperliquid HIP-3 perpetuals to US regulated markets, subject to approval, and HYPE rose 10–20% and held through the hack. Some Korean commentators called for Upbit and Bithumb to list HYPE. On-chain analyst ZachXBT flagged that more than 76M AXIS tokens (about $12M) moved from the team multisig and were sold after last week's Upbit TGE-day listing, with the price down over 40%; the team blamed an OTC partner for breaching its contract.
| Token | Exchange | Date |
|---|---|---|
| NIL Nillion |
 KRW
|
Oct 27 16:40 KST |
Upbit listed only NIL this week. Bithumb listed nothing.
Korea Signal is published weekly by Holo Hive · Unsubscribe