South Korean cryptocurrency exchange GOPAX suspended trading, deposits, and standard withdrawals Friday following an email threatening a hack, opting to transfer all user assets to offline cold wallets as a precautionary measure aligned with regulatory guidance.
Key Takeaways
- GOPAX suspended all trading and standard withdrawals Friday after a hack threat, moving assets to cold storage.
- The exchange held 80.54% of assets offline as of September, just above the FSC's 80% mandate.
- FSC flagged GOPAX operator Streami among 16 firms with prior security incidents, signaling tighter oversight.
- Prabang exchange separately lost ~$70,000 in an Oct. 24 hot-wallet exploit and suspended services.
- Manual withdrawals remain available via GOPAX support but face processing delays.
Executive Intelligence Brief
Suspension Timeline and Operational Status
According to local newspaper Kyunghyang Shinmun, GOPAX halted deposits and standard withdrawals at 5:55 am UTC. Trading ceased at 6:53 UTC, with all unfilled orders canceled. A GOPAX representative confirmed no hack or attempted theft had occurred at the time of the suspension.
Customers can still request withdrawals through GOPAX's support center, though the exchange warned that manual verification and approvals could delay processing. Cointelegraph had not received a response from GOPAX by publication time.
Regulatory Context: The 80% Cold-Storage Mandate
The move comes days after South Korea's Financial Services Commission (FSC) urged domestic exchanges to increase cold-wallet holdings following the $6.3 billion Binance hack. South Korean exchanges must keep at least 80% of customer crypto assets in cold storage.
Financial Supervisory Service data showed GOPAX held 80.54% of user assets offline at the end of September, barely above the required minimum. The exchange cited financial regulators' recommendations in its notices announcing the asset transfer.
Wider Cybersecurity Crackdown
In October, the FSC reported cybersecurity deficiencies at 130 of 555 financial companies reviewed nationwide. The regulator identified GOPAX operator Streami and crypto exchange Prabang among 16 companies involved in earlier security incidents, prompting plans for tighter cybersecurity oversight.
Prabang separately suspended services on Oct. 24 after detecting abnormal withdrawals from its hot wallet, reporting losses of about 100 million won ($70,000), according to Yonhap News Agency. Prabang said it would reimburse affected customers using company funds.
Forward Outlook
Market participants should monitor the FSC's implementation of enhanced oversight for the 16 flagged firms, GOPAX's timeline for restoring full services, and whether other exchanges near the 80% threshold take similar preemptive measures. The episode underscores how regulatory minimums can become operational flashpoints when threat vectors emerge.
