- South Korean police asked Binance to freeze Solana tokens linked to the Upbit breach on Nov. 27.
- Binance reportedly froze about $55,000 after a delay of roughly 15 hours.
- The Upbit breach involved unauthorised Solana-based withdrawals worth about $36 million.
South Korean authorities are scrutinising how overseas cryptocurrency platforms respond to urgent law enforcement requests after new details surfaced about Binance’s handling of a police freeze request tied to a security breach at Upbit.
The incident has become an example of how quickly stolen digital assets can be contained — or dispersed — once they leave domestic exchanges and move across borders.
Although cooperation between exchanges and regulators is often described as routine, the Upbit case underscores how verification procedures and response times can materially affect the outcome of active investigations.
The situation has also renewed debate about whether existing cross-border coordination mechanisms are adequate when breaches involve large sums and assets that can be moved rapidly.
Freeze request and delayed action
According to South Korean broadcaster KBS, police investigating the Upbit breach asked Binance on Nov. 27 to freeze Solana tokens worth about 470 million Korean won, roughly $370,000.
Investigators believed the funds were linked to wallets associated with the incident at Upbit, one of South Korea’s largest cryptocurrency exchanges.
KBS reported that Binance ultimately froze around $55,000, equivalent to about 17% of the amount requested. That action occurred after an approximate 15-hour delay.
Binance reportedly told authorities that additional verification was required before it could act on the full request. The disparity between the amount requested and the amount frozen has become central to questions about enforcement speed and the effectiveness of current procedures.
Impact of the Upbit breach
The police request followed unauthorised withdrawals of Solana-based assets from Upbit valued at roughly $36 million. The scale of the breach prompted a formal police investigation and a coordinated effort by the exchange to trace and recover funds across multiple platforms.
As part of the response, Upbit has been tracking wallet movements and notifying major global exchanges about assets suspected of being linked to the breach. The case highlights how quickly stolen crypto can be distributed and why early intervention is critical once an incident is detected.
Broader enforcement challenges
The incident has drawn attention to structural issues in global crypto enforcement. KBS cited commentary noting that rapid initial freezes can limit losses in hacking cases, while delays can give bad actors time to move or launder assets further.
Concerns have been raised about exchanges invoking legal or litigation risks when responding cautiously to foreign law enforcement requests. That cautious approach can slow down containment efforts and complicate recovery attempts.
Discussion around the case has included proposals for tighter coordination, such as establishing direct emergency communication channels between major exchanges and mechanisms that would allow temporary freezes while verification is completed. These ideas reflect an ongoing debate about balancing due process and legal safeguards with the need for swift action to contain theft and reduce the risk of irreversible asset dispersion.
As investigations continue, the Upbit incident serves as a reminder that cross-border cooperation, clear protocols, and faster verification methods could be crucial in limiting the damage from future crypto-related breaches.