South Korea’s Financial Services Commission (FSC) has directed domestic cryptocurrency exchanges to increase the proportion of assets held in cold storage following a $6.3 billion hack on Binance last week. The regulator convened an emergency meeting with the Financial Supervisory Service, the Digital Asset eXchange Alliance (DAXA), and major service providers to assess security protocols and market impact.
During the review, the FSC examined IT access controls, wallet withdrawal approvals, signing procedures, and administrator privileges. While South Korean law already mandates that exchanges hold at least 80% of user assets in offline cold wallets, actual holdings vary significantly among top platforms. Data from late September showed Upbit holding 99.17% in cold storage, followed by Bithumb at 94.76%, Coinone at 85%, Digital X at 82.79%, and GOPAX at 80.54%. The FSC urged operators to raise these ratios further, enhance continuous monitoring of deposits and withdrawals, secure additional incident response personnel, and establish extra reserves to mitigate potential future breaches.
The directive comes as blockchain intelligence firm TRM Labs reported that attackers moved most of the stolen funds from Binance’s hot wallets within approximately 20 minutes. Separately, the Bank of Korea is conducting a survey of 18 banks and 13 brokerages regarding their exposure to crypto-related risks, including exchange hacks, although this review began prior to the recent Binance incident.
The FSC’s intervention highlights the tension between regulatory minimums and operational reality in South Korea’s crypto sector. Although the 80% cold storage requirement exists, the significant variance in compliance—ranging from near-total offline custody at Upbit to barely meeting the threshold at GOPAX—suggests that current regulations may not adequately address the risk profile of hot wallets during high-velocity attacks. By urging exchanges to exceed statutory minimums, the regulator is effectively signaling that baseline compliance is insufficient against sophisticated threats like the one faced by Binance.
This move also reflects a broader institutional concern about systemic contagion. The simultaneous survey by the Bank of Korea indicates that traditional financial entities are being scrutinized for indirect exposure to crypto volatility and security failures. For exchanges, the pressure to allocate more capital to cold storage infrastructure and incident response teams will likely increase operational costs, potentially reshaping competitive dynamics among local platforms that have historically prioritized liquidity and speed over maximal security buffers.
