News linked to both this project and an event.
Bithumb stated that on October 27, its internal mobile collaboration system, DaouOffice, was subjected to unauthorized external access, resulting in the theft of some customer and employee personal information. The incident involved 6,444 customers, among whom the data for 5,600 individuals was encrypted and unreadable, while an additional 844 customers were confirmed to have had their personal information compromised. Furthermore, the information of 715 employees and partner personnel was also affected.
Odaily reports: South Korean cryptocurrency exchange Bithumb has stated that its internal mobile system used by employees for work and communications was breached by external parties, with some personal information stolen. The exchange is currently investigating the specific scope of impact, including whether customer information was involved.Bithumb discovered the breach on October 27 and has reported it to the Korea Internet & Security Agency and the Personal Information Protection Commission. The exchange emphasized that the compromised internal system operates independently from its trading platform, and that attackers cannot access customer crypto assets through this breach.As of now, no crypto asset losses have been reported, and the specific number of affected individuals and whether deposit and withdrawal services were impacted have not yet been disclosed. (CoinDesk)
Odaily reports: Binance founder CZ posted on the X platform that four data breach incidents were reported today, involving Coinbase third-party service provider Amplitude, South Korean crypto exchange Bithumb, and South Korean traditional financial institutions Mirae Asset and Daishin Securities. Among them, the Amplitude security incident affected the contact information of some Coinbase users, but user funds were not affected.CZ noted that information such as names, emails, phone numbers, addresses, identity documents, and transaction records leaked from trading platforms may be used for phishing, SIM-swapping, and social engineering attacks.In response, CZ recommends that users set up separate email addresses and strong passwords for different trading platforms, prioritize the use of hardware security keys, Passkeys, or authenticator apps, avoid relying on SMS two-factor authentication, and enable security features such as withdrawal address whitelists and anti-phishing codes. At the same time, users should regularly check account login sessions and API key permissions, and be vigilant against scams impersonating customer service.CZ also reminded users that if a platform suffers a data breach, they should promptly change passwords, revoke unnecessary API keys, check withdrawal records, and be alert to phishing attacks carried out using leaked information. In addition, leaked home addresses and asset holdings information may give rise to real-world extortion or robbery risks, and users should avoid publicly disclosing their personal asset situation.
According to Yonhap News Agency, the South Korean Financial Supervisory Service has confirmed that a cybersecurity incident occurred at cryptocurrency exchange Bithumb, Mirae Asset Management, and Daishin Securities, with further investigations underway. Daishin Securities disclosed that the personal and credit information of 38,490 customers was compromised, while Bithumb reported that its internal mobile office system was accessed abnormally by unauthorized external parties and is currently analyzing the precise scope of the data breach. The South Korean Financial Supervisory Service has dispatched an on-site inspection team to Daishin Securities and has mandated that financial institutions strengthen their IT security measures.
According to announcements from Upbit and Bithumb, both Korean cryptocurrency exchanges have designated Initia (INIT) as a trading alert asset due to unexplained or unresolved security incidents, such as hacks impacting related wallets or distributed ledgers, which could lead to user asset losses. Currently, deposit and withdrawal services for INIT on both exchanges have been suspended. Upbit stated that upon resumption, withdrawals will be prioritized, with deposit services to be announced separately.
Odaily News: Blockchain project Core DAO has announced a coordinated emergency hard fork, caused by validators receiving CORE rewards exceeding the blockchain's originally scheduled issuance. Core DAO stated that the incident is under control, malicious validators can no longer continue to obtain excess rewards, and the upgrade will not roll back the network or revoke confirmed transactions.Core DAO previously stated that a small number of validators had accumulated rewards significantly higher than the protocol's set issuance, and that the incident only involved reward distribution, with user assets remaining secure. Coinbase, Bithumb, Coinone, Bitget, and LBank had restricted CORE deposits, withdrawals, or transfers.Core DAO has not yet disclosed the amount of excess CORE issued, the duration of the related activity, whether the extra tokens entered circulation, or the cause of the vulnerability, and stated that it will publish a technical post-mortem report. (Cointelegraph)
According to an official announcement, South Korean cryptocurrency exchange Bithumb has announced the immediate suspension of all virtual asset deposits and withdrawals related to the overseas payment platform Heleket, effective May 21, 2026. The announcement states that Heleket is suspected of involvement in illegal activities such as money laundering and terrorist financing. Bithumb stated that this measure is taken to comply with relevant regulations, including the Act on Reporting and Using Specified Financial Transaction Information and the Virtual Asset User Protection Act, and to safeguard users’ assets. Bithumb also warned that using unverified overseas services may expose users to risks such as hacking attacks and disruptions to deposit and withdrawal services.
Decentralized GPU cloud computing infrastructure platform Aethir confirmed that its Ethereum-related bridge contract was attacked. The team promptly disconnected the affected contract and, in collaboration with major exchanges, blacklisted the hacker’s wallet, limiting losses to under $90,000. Earlier, blockchain security firm PeckShield estimated losses at $400,000. The attacker exploited Aethir’s cross-chain smart contract, AethirOFTAdapter, to transfer stolen funds from BNB Chain to Tron. Aethir stated that its Ethereum mainnet ATH token supply remains unaffected. It plans to release a detailed compensation plan and incident analysis next week and will collaborate with exchanges including Binance, Upbit, and Bithumb to freeze funds. Web3 security platform ZeroShadow is assisting with the investigation. In 2025, Aethir achieved $127.8 million in revenue and deployed over 440,000 GPU containers globally.