Bithumb, South Korea's second-largest crypto exchange by trading volume, disclosed Wednesday that an outsider breached an internal mobile system used by employees for work and messaging, stealing personal information. The exchange reported no loss of cryptocurrency funds as of Asian afternoon hours. Bithumb discovered the intrusion on Tuesday and notified the Korea Internet & Security Agency and the Personal Information Protection Commission, according to Korean media. The compromised system runs separately from the trading platform, meaning customer virtual assets cannot be accessed through this breach, per Bithumb. The exchange has not disclosed how many people were affected or whether deposits and withdrawals were disrupted.
The breach matters because it is Bithumb's second control failure this year and lands amid a broader wave of cyberattacks hitting South Korean financial firms. In February, Bithumb mistakenly credited customers with 620,000 BTC — worth more than $40 billion at the time — instead of 620,000 won, a blunder CEO Lee Jae-won attributed to weak internal system controls. The Financial Supervisory Service said Wednesday it was assessing Bithumb alongside two other firms: Daishin Securities, where personal and credit information for 38,490 customers leaked in an outside attack, and Mirae Asset Global Investments, which blocked abnormal access to some web systems. FSS Governor Lee Chan-jin stated that 16 South Korean financial firms had experienced cyberattacks as of Oct. 14.
For traders, this is operational risk context rather than a price catalyst. Bithumb has confirmed no crypto funds were lost and the breach was contained to an employee system, which limits direct counterparty risk for users holding funds on the platform. The exchange has not stated whether withdrawals were paused. The incident does not affect other venues or tokens. Still, the February credit error combined with this breach indicates persistent control weaknesses at the second-largest exchange in a major market, which matters for anyone with exposure there. Operational fragility at a top-tier venue can become a liquidity event if confidence erodes — watch for any disclosure of customer data exposure or withdrawal disruptions.
The specific thing to watch is whether Bithumb confirms customer information was involved and whether it discloses the scale of affected users. The exchange told Yonhap it was analyzing "the possibility of member information being involved," which leaves the door open. If customer email addresses, phone numbers, or KYC data were taken, phishing and social engineering risks rise for Bithumb users, and the reputational damage deepens. Any pause in deposits or withdrawals — not yet disclosed — would be the signal that this is escalating beyond a contained breach into a confidence event.
Source: CoinDesk