South Korea's Financial Services Commission (FSC) plans to allow crypto exchanges to suspend deposits and withdrawals when hacking is suspected, rather than waiting until a breach is confirmed, amid a push for stronger industry security.
The FSC said Thursday it would issue a no-action letter permitting preventive suspensions under certain conditions. Current rules prohibit exchanges from blocking withdrawals without legitimate grounds and explicitly allow restrictions only when a hacking incident is clearly established.
The move follows recent security incidents involving South Korean crypto exchanges. On Friday, exchange GOPAX suspended trading, deposits and standard withdrawals after receiving a hacking threat, although a representative said no breach had occurred. On Oct. 24, trading platform Prabang suspended services after detecting abnormal hot-wallet withdrawals, reporting about $70,000 in losses.
The regulator also called for round-the-clock monitoring and incident response, higher cold-wallet holdings, and stronger insurance coverage and reserves. The FSC said exchanges unable to monitor continuously would process deposits and withdrawals only during staffed hours and notify users in advance.
In October, the FSC identified cybersecurity deficiencies at 130 of 555 financial companies reviewed nationwide. It separately identified GOPAX operator Streami and Prabang among 16 companies involved in earlier security incidents.
Analysis
Why This Matters
- Investors may get faster protection against hacks, but also face exchange freezes based on suspicion alone
- The policy shift marks a regulatory step toward proactive cybersecurity in South Korea's crypto sector
- Exchanges that cannot afford 24/7 monitoring will face operational restrictions
Background
South Korea is a major global crypto trading hub. The FSC has been tightening oversight after a series of exchange hacks and security lapses. Current rules had required confirmed breaches before blocking withdrawals, which critics said left exchanges slow to respond.
Key Perspectives
FSC: says the no-action letter will allow preventive suspensions under certain conditions, and called for round-the-clock monitoring, higher cold-wallet holdings, and stronger insurance. GOPAX: suspended services after receiving a hacking threat, though no breach occurred. Prabang: detected abnormal withdrawals and reported $70,000 in losses.
What to Watch
- Whether the FSC publishes specific conditions for when a suspension is justified
- How exchanges without 24/7 monitoring staff adjust their operations and notify users
- Any further security incidents that could accelerate or alter the regulatory timeline
Checked
12 claims in this story checked against 1 source: 12 supported.
Show each claim
- SupportedSouth Korea plans to let crypto exchanges suspend withdrawals when hacking is suspected.Cointelegraph.com News: “South Korea’s Financial Services Commission (FSC) plans to allow crypto exchanges to suspend deposits and withdrawals when hacking is suspected, rather than waiting until a breach is confirmed”
- SupportedThe FSC plans a no-action letter permitting preventive suspensions amid a push for stronger industry security.Cointelegraph.com News: “On Thursday, the FSC said it would issue a no-action letter permitting preventive suspensions under certain conditions.”
- SupportedThe FSC plans to allow exchanges to suspend deposits and withdrawals when hacking is suspected, rather than waiting for a confirmed breach.Cointelegraph.com News: “South Korea’s Financial Services Commission (FSC) plans to allow crypto exchanges to suspend deposits and withdrawals when hacking is suspected, rather than waiting until a breach is confirmed”
- SupportedThe FSC said on Thursday it would issue the no-action letter under certain conditions.Cointelegraph.com News: “On Thursday, the FSC said it would issue a no-action letter permitting preventive suspensions under certain conditions.”
- SupportedCurrent rules prohibit blocking withdrawals without legitimate grounds and allow restrictions only when a hacking incident is clearly established.Cointelegraph.com News: “Current rules prohibit exchanges from blocking withdrawals without legitimate grounds and explicitly allow restrictions only when a hacking incident is clearly established.”
- SupportedOn Friday, GOPAX suspended trading, deposits and standard withdrawals after receiving a hacking threat.Cointelegraph.com News: “On Friday, crypto exchange GOPAX suspended trading, deposits and standard withdrawals after receiving a hacking threat”
- SupportedA GOPAX representative said no breach had occurred.Cointelegraph.com News: “although a representative said no breach had occurred.”
- SupportedOn Oct. 24, Prabang suspended services after detecting abnormal hot-wallet withdrawals and reported about $70,000 in losses.Cointelegraph.com News: “On Oct. 24, trading platform Prabang suspended services after detecting abnormal hot-wallet withdrawals, reporting about $70,000 in losses.”
- SupportedThe FSC called for round-the-clock monitoring and incident response, higher cold-wallet holdings, and stronger insurance coverage and reserves.Cointelegraph.com News: “The regulator also called for round-the-clock monitoring and incident response, higher cold-wallet holdings, and stronger insurance coverage and reserves.”
- SupportedExchanges unable to monitor continuously would process deposits and withdrawals only during staffed hours and notify users in advance.Cointelegraph.com News: “The FSC said exchanges unable to monitor continuously would process deposits and withdrawals only during staffed hours and notify users in advance.”
- SupportedIn October, the FSC identified cybersecurity deficiencies at 130 of 555 financial companies reviewed nationwide.Cointelegraph.com News: “In October, the FSC identified cybersecurity deficiencies at 130 of 555 financial companies reviewed nationwide.”
- SupportedThe FSC separately identified Streami, GOPAX’s operator, and Prabang among 16 companies involved in earlier security incidents.Cointelegraph.com News: “It separately identified GOPAX operator Streami and Prabang among 16 companies involved in earlier security incidents.”
