Upbit is South Korea's dominant cryptocurrency exchange, operated by Dunamu Inc. and launched in 2017 with backing linked to the Kakao ecosystem. It sits at the centre of one of the world's largest retail crypto markets: as of the November 2025 Naver deal announcement, Dunamu served more than 9 million registered users and over 80 per cent of domestic crypto trading volume. For a bank digital-asset team, Upbit matters because Korea's won market is structurally bank-linked by regulation, and Upbit's partnership model with K Bank is the template that regime enforces: understanding Upbit is close to understanding how fiat enters and exits Korean crypto at all.
The bank-linked won market
Korean rules require exchanges offering won trading to hold a real-name account agreement with a domestic bank, so that every fiat deposit and withdrawal maps to a verified bank account in the customer's own name. Upbit's partner is K Bank, an internet-only lender whose fortunes have been unusually tied to the exchange: Upbit-linked deposits exceeded half of K Bank's deposit base in 2021 and still stood at roughly 18 per cent as of the end of the first quarter of 2026, with the partnership up for renewal and other banking groups reportedly circling. The dependency runs both ways, and K Bank has said it wants to extend the relationship into stablecoin business as Korea's won-stablecoin debate progresses. The won market's structural isolation (foreigners are effectively excluded from the real-name regime) is what historically produced the kimchi premium, the persistent gap between Korean and global crypto prices.
Regulatory friction
The FIU (Financial Intelligence Unit, under the FSC (Financial Services Commission)) has been the binding constraint on Upbit's growth. Following an inspection that alleged large volumes of KYC (know-your-customer) failures, the FIU imposed a three-month restriction barring new customers from virtual-asset deposits and withdrawals, running 7 March to 6 June 2025, alongside warnings to executives. A fine of roughly USD 25 million followed in November 2025, which Dunamu said it was reviewing and might appeal. The enforcement record matters beyond Upbit: it shows the FIU treating the dominant licensed venue as the enforcement benchmark for the whole market.
Security record
Upbit has been hacked twice, both times with a North Korea connection asserted or suspected. In November 2019 it lost 342,000 ether from a hot wallet, a theft South Korean police formally attributed to the Lazarus and Andariel groups in November 2024. On 27 November 2025 it disclosed a roughly USD 36 million theft of Solana-network assets from a hot wallet, pledging to reimburse users in full from its own reserves. Both losses were absorbed without customer impact, which is itself a data point on Dunamu's balance sheet.
The Naver deal
In November 2025, Naver Financial agreed to acquire Dunamu in an all-stock share swap valued at about USD 10.3 billion, folding Korea's dominant exchange into the financial arm of its dominant internet platform, subject to shareholder and regulatory approvals. The likelier read is that this is a bet on won-denominated stablecoins and payments as much as on exchange revenue, positioning a Naver-Dunamu combination as the private-sector champion if Korean legislation opens a won-stablecoin regime.
What to watch
Three threads for bank readers. First, the K Bank partnership renewal and any bank-switching contest, since whoever holds the real-name agreement holds the fiat gateway to most of Korean crypto. Second, the Naver transaction's completion and conditions, which will determine whether Korea's crypto market consolidates into a platform conglomerate. Third, the won-stablecoin legislative debate, where the Upbit, K Bank, and Naver triangle appears best placed to move first.