South Korea FSC to Let Exchanges Freeze Withdrawals on Hack Fears
South Korea's Financial Services Commission will let crypto exchanges halt deposits and withdrawals on suspicion of hacking, after incidents at GOPAX and Prabang. The FSC also wants 24/7 monitoring, more cold storage and stronger reserves.
Crypto exchanges in South Korea will be able to suspend deposits and withdrawals when a hack is suspected, rather than waiting for a breach to be confirmed. The Financial Services Commission (FSC) said on Thursday, Nov. 12, that it would issue a no-action letter permitting such preventive suspensions under certain conditions.
A no-action letter is a regulator's written assurance that it will not penalize a specific behavior. The conditions attached to the relief were not detailed in the announcement.
What changes for exchanges
Current rules bar exchanges from blocking withdrawals without legitimate grounds and explicitly allow restrictions only when a hacking incident is clearly established. That standard leaves platforms in a bind. By the time a breach is confirmed, funds may already be gone, yet freezing earlier risks a regulatory violation. The no-action letter moves the trigger point from a confirmed breach to a suspected one, which matters for platforms that often get only minutes to respond to an attack.
The FSC paired the relief with tougher security expectations. It called for round-the-clock monitoring and incident response, higher cold-wallet holdings, and stronger insurance coverage and reserves. Exchanges unable to monitor continuously would process deposits and withdrawals only during staffed hours and notify users in advance.
Exchanges must currently keep at least 80% of assets in cold wallets. The FSC has called for raising that minimum.
The incidents behind the move
Two recent cases frame the policy. On Nov. 6, GOPAX suspended trading, deposits and standard withdrawals after receiving a hacking threat by email, and moved assets into cold storage. A representative said no breach had occurred.
Prabang was not as fortunate. On Oct. 24, the platform detected abnormal hot-wallet withdrawals, suspended services and reported losses of about 100 million won, roughly $70,000. It pledged to compensate affected customers with company funds.
The regulator has been tracking the problem for weeks. In October, the FSC found cybersecurity deficiencies at 130 of 555 financial companies it reviewed, and named GOPAX operator Streami and Prabang among 16 companies involved in earlier security incidents. Research findings on the wider sector count more than 37 South Korean financial firms hit by cyber incidents between late September and early November 2026, with around 473,000 records exposed and roughly 1 billion won stolen. The FSC held an emergency meeting on Nov. 2.
Trade-offs and open questions
The design of the trigger will matter. A loosely defined one could let exchanges freeze user funds for convenience, while a tightly defined one could leave them hesitating in the very moments the policy is meant to address.
A higher cold-storage ratio carries its own cost: large withdrawals can take longer, which could affect liquidity and operational flexibility. And not every small exchange has the balance sheet to compensate customers as Prabang did.
The stakes are not hypothetical. The FBI recently tied a $6.3 billion Binance hack to North Korea, a reminder of the scale of theft exchanges face. Until the FSC publishes the letter's conditions, Korean exchanges will not know how much room they actually have.
