Upbit

Who Upbit fits

Upbit is the largest crypto exchange in South Korea by a wide margin, and it’s built almost entirely around that market. If you’re a South Korean resident with a local bank account and ID, it’s the default choice for KRW liquidity and for accessing Korea-specific tokens that don’t have meaningful volume anywhere else. If you’re reading this from outside Korea, treat this review as informational rather than a signup recommendation: Upbit’s core platform runs Korean-first, its real-name banking requirement is tied specifically to a Korean bank, and its customer support is built around Korean-speaking users. Separate Upbit-branded entities operate in Singapore, Indonesia, and Thailand under their own local licenses, but they’re distinct products from Upbit Korea, not an international version of the same account.

Product-wise, Upbit keeps things simple by regulatory necessity as much as design: it’s a spot exchange, full stop. South Korea doesn’t allow domestic virtual asset service providers to offer leveraged trading to retail customers, so there’s no margin, no futures, no options here, a real structural difference from Binance, Bybit, or OKX rather than a product gap Upbit chose on its own.

Security and custody

Upbit’s security history has two chapters, and both matter. On November 27, 2019, attackers stole roughly 342,000 ETH (worth around $50 million at the time, though the same amount would be worth well over $1 billion at recent ether prices) from Upbit’s hot wallet. South Korean police later confirmed, in a 2024 investigation, that North Korea’s Lazarus and Andariel hacking groups were responsible, the first time Korean authorities had formally attributed a crypto theft to North Korea. Upbit covered the loss from its own funds rather than passing it on to customers.

A second, more recent incident is worth taking just as seriously precisely because it’s so recent. On November 27, 2025, exactly six years to the day after the first breach, attackers drained roughly 44.5 billion won (about $30 million) in Solana-ecosystem tokens, including SOL and USDC among others, from an Upbit hot wallet in about 54 minutes. A subsequent emergency audit uncovered a critical flaw in Upbit’s internal wallet software that could, under certain conditions, have allowed private keys to be derived from public blockchain data, though Upbit said it hadn’t established a direct link between that flaw and the theft itself. The company pledged to reimburse the roughly $26 million in direct customer losses from its own reserves and, within weeks, moved over 99% of user assets into cold storage, well above the 80% minimum South Korean regulation requires. That response was fast and losses were covered, but two material hot-wallet breaches six years apart is a heavier pattern than a single well-handled incident, worth weighing against Upbit’s dominant liquidity, and a good prompt to revisit Wallets and Custody Explained regardless of which exchange you use.

Deposits and withdrawals

KRW deposits and withdrawals require a real-name-verified bank account at K Bank specifically, Upbit’s sole partner for South Korea’s mandatory real-name verification system, a regulatory requirement applied to every major domestic exchange, not a Upbit-specific choice. That K Bank partnership is a recurring, periodically renewed contract rather than a permanent arrangement; it was most recently extended toward an October 2026 renewal point, with K Bank publicly signaling it wants to expand the relationship further into stablecoins. Foreign nationals can technically complete real-name verification with an alien registration card and a Korean telecom SIM, but in practice this puts full KRW access out of reach for almost anyone who isn’t living in Korea. Crypto deposits and withdrawals move at normal network speed once confirmations clear, and the regional Upbit Global entities (Singapore, Indonesia, Thailand) share some BTC and USDT liquidity with the Korean platform, but they run their own separate fiat rails and accounts.

Fees

Upbit’s KRW-market fees have generally sat around a low 0.05%, but its crypto-to-crypto markets (BTC and USDT pairs) have moved more than once: a standard 0.25% rate was cut to a promotional 0.05% in mid-2026 as competing exchanges rolled out fee-free trading, and there’s no guarantee that promotional rate holds. Given how much this has shifted even within 2026, check the live fee schedule for the specific market you’re trading before assuming either the standard or promotional rate applies; see our exchange comparisons for how that stacks up against other platforms at a given volume tier.

Upbit’s product lineup

Spot trading is essentially the entire product. What sets it apart is depth and breadth within that single category: Upbit carries some of the deepest KRW order books of any exchange globally, and its listings lean heavily toward Korea-origin and Korea-popular tokens that see little serious volume on Binance, Coinbase, or other international platforms. That makes it a genuinely useful reference point for KRW price discovery, sometimes called the “Kimchi premium” when Upbit prices run ahead of international markets. There’s no margin, leverage, futures, or options on the domestic platform, a direct consequence of South Korean financial regulation rather than a gap Upbit is expected to fill. The regional Upbit Global entities in Singapore, Indonesia, and Thailand offer their own separate product sets under local rules, worth checking individually if you’re in one of those markets rather than assuming Upbit Korea’s feature set applies.

Regulatory footprint

Upbit operates under South Korea’s Financial Services Commission and Financial Intelligence Unit as a registered virtual asset service provider, one of a small handful (alongside Bithumb, Coinone, and Korbit) that has cleared the bar of a real partner-bank relationship enabling KRW fiat rails, a requirement that has kept most new entrants out of the Korean market entirely. It’s subject to South Korea’s Virtual Asset User Protection Act, which took effect in 2024 and mandates at least 80% cold storage along with reserve and insurance arrangements; Upbit now holds itself to a stricter standard than that minimum following the 2025 breach. Korean crypto regulation is also tightening further: the government approved amendments in August 2026 removing the previous roughly $720 (1 million won) threshold under the crypto Travel Rule, with expanded requirements phasing in through early 2027, and Upbit, as the largest domestic player, sits squarely in the middle of that scrutiny. For broader context on how this compares to other jurisdictions, see Crypto Regulation by Region.

The most significant unresolved item is corporate ownership itself. In November 2025, Naver Financial, the fintech arm of Naver, South Korea’s dominant internet company, announced an all-stock acquisition of Dunamu, Upbit’s operator, valued at roughly $10.3 billion; once complete, Upbit becomes a subsidiary of Naver Financial rather than an independently controlled company (an earlier, smaller investor relationship with Kakao, Naver’s rival, was unwound as part of the same consolidation). As of this writing the deal was still working through South Korean antitrust review, with completion targeted around September 30, 2026, and Dunamu’s leadership has separately signaled plans to pursue an IPO once the share exchange closes. Treat the ownership transition as in progress rather than settled, and it’s worth watching how a much larger corporate parent shapes Upbit’s product direction, fees, or compliance posture going forward.

Customer support

Support is built around Korean-speaking users first. Upbit runs an in-app help center and support channels, but response quality and speed for English-language inquiries lag noticeably behind what a Korean-speaking user can expect, particularly for anything beyond routine account questions. If you’re not able to communicate comfortably in Korean and you run into an account or withdrawal issue, expect that to be a genuinely harder experience than the same issue would be on an English-first exchange, and factor that into how much you’re comfortable holding on the platform.

Who should look elsewhere

If you’re not a South Korean resident with local banking and ID, Upbit’s core KRW product isn’t realistically usable, whatever its liquidity numbers look like on paper; Binance or Kraken will serve an international reader far better, and Binance vs. Upbit lays out that gap concretely. If you want margin, futures, or options, Upbit’s Korean platform offers none of it by regulatory design; Bybit or OKX are the better fit. And if two hot-wallet breaches within the same platform’s history, six years apart, is more risk than you’re willing to carry regardless of how well the losses were covered, that’s a reasonable line to draw, and it’s worth reading Common Crypto Scams alongside this review as a reminder that no exchange, however dominant its liquidity, should be treated as a substitute for sound personal custody practices.