Binance under scrutiny over response to South Korean police request in Upbit breach case

• South Korean police asked Binance to freeze Solana tokens linked to the Upbit breach on Nov. 27.
• Binance reportedly froze about $55,000 after a delay of roughly 15 hours.
• The Upbit breach involved unauthorised Solana-based withdrawals worth about $36 million.

South Korean authorities are examining how overseas crypto platforms respond to urgent law enforcement requests after new details emerged about Binance’s handling of a police freeze request linked to a security breach at Upbit.

The case has become a reference point for how quickly stolen digital assets can be contained once they leave domestic exchanges and move across borders.

While cooperation between exchanges and regulators is often described as routine, the Upbit incident shows how verification processes and response times can shape the outcome of active investigations.

The situation has also renewed attention on whether existing cross-border coordination mechanisms are sufficient when hacks involve large sums and fast-moving assets.

Freeze request and delayed action

According to South Korean broadcaster KBS, police investigating the Upbit breach asked Binance to freeze Solana tokens worth about 470 million Korean won, or roughly $370,000, on Nov. 27.

Investigators believed the funds were linked to wallets connected to the incident at Upbit, one of the country’s largest cryptocurrency exchanges.

KBS reported that Binance ultimately froze around $55,000, equivalent to about 17% of the amount requested.

The freeze came after a delay of approximately 15 hours.

Binance reportedly told authorities that additional verification was required before it could act on the full request.

The gap between the amount requested and the amount frozen has become central to questions about enforcement speed.

Impact of the Upbit breach

The police request followed unauthorised withdrawals of Solana-based assets from Upbit valued at roughly $36 million.

The scale of the breach prompted a formal police probe and a broader effort by the exchange to trace and recover funds across multiple platforms.

As part of the response, Upbit has been tracking wallet movements and alerting major global exchanges to assets suspected of being linked to the breach.

The case illustrates how quickly stolen crypto can be distributed, making early intervention critical once an incident is detected.

Broader enforcement challenges

The incident has drawn attention to structural issues in global crypto enforcement.

KBS cited commentary highlighting that rapid initial freezes can limit losses in hacking cases, while delays can allow assets to be moved or laundered further.

Concerns have also been raised about exchanges citing legal or litigation risks when responding cautiously to foreign law enforcement requests.

The discussion has included proposals for tighter coordination, such as direct emergency communication channels between major exchanges with the authority to enact temporary freezes while verification is completed.

These ideas reflect ongoing debates about balancing due process with the need for swift containment.