South Korea is moving to tighten security across its crypto exchange sector in the wake of a breach at Binance that resulted in the loss of more than $6.3 billion from the world's largest digital asset exchange, according to a CryptoNinjas report.

The country's top financial regulator has embarked on an emergency examination of domestic exchanges, including the systems used to control access to wallets. Platforms have been directed to increase the proportion of customer funds held in cold wallets, tighten withdrawal rules, strengthen around-the-clock monitoring and incident response, and build up reserve buffers. All of the platforms in scope operate as registered virtual asset service providers under South Korea's crypto reporting regime, which keeps the entire licensed market within the regulator's direct oversight.

FSC Convenes Emergency Meeting on Wallet Security

The Financial Services Commission (FSC) held an emergency meeting on Nov. 2 together with the Financial Supervisory Service, the Financial Security Institute, the Digital Asset eXchange Alliance (the joint consultation body of South Korea's five major won-based exchanges: Upbit, Bithumb, Coinone, Korbit and Gopax) and major virtual asset service providers, per its official announcement.

The review centered on user access to exchanges' IT systems and the administrator privileges granted to customers, as well as the approval and signing of crypto withdrawals from hot wallets.

The regulator directed platforms to boost the proportion of customer money held in cold storage, where private keys are not stored online and are therefore less vulnerable to remote attacks. Hot wallets, by contrast, stay connected to the internet so exchanges can process day-to-day deposits and withdrawals, a convenience that leaves them more exposed to remote attacks. Local news reports state that South Korea already mandates that 80% of virtual asset service providers' customers' crypto assets be kept in cold wallets.

Binance Hack Puts Hot-Wallet Risks Back in Focus

Binance reported on Oct. 30 that it had detected unauthorized withdrawals of approximately $6.3 billion from its hot wallets, the FSC said.

Potential attack vectors are being considered, including vulnerabilities in employee work computers, unauthorized access to internal systems, or illicit contact with the transaction approval or signing systems. The regulator did not present those scenarios as confirmed findings.

Binance has stated that it will compensate customers with the company's funds or other reserves. Since the incident, the exchange has also begun monitoring and freezing the stolen assets.

Exchanges Told to Monitor Crypto Flows Around the Clock

Cold storage is only one of the measures the FSC is encouraging. The agency also advised exchanges to keep a close watch on deposits and withdrawals, deploy staff dedicated to incident response, and issue timely alerts on unusual access attempts to facilitate industry-wide sharing of information.

Platforms were further advised to make additional investments in reserves capable of offsetting losses incurred from future security threats.

The steps come as Binance grapples with the financial fallout from the hack. The exchange reported net withdrawals of $4.72 billion after withdrawals resumed, though it noted that outflows were beginning to ease.

Crypto Security Controls Move Beyond Cold Wallet Ratios

The Binance attack underscored that storing more assets offline does not, on its own, reduce risks tied to privileged accounts, employee devices, or transaction-signing systems. That is why South Korea's review targets both asset custody and operational controls.

Should another attack occur, the FSC said it will continue its efforts with regulators and crypto businesses to prevent further intrusions and mitigate losses.