South Korea Weighs 99% Cold Wallet Rule After $6.3B Binance Hack

The Financial Services Commission called the emergency meeting on November 2, days after hackers drained roughly $6.3 billion from Binance hot wallets across 10 blockchains in about 20 minutes on October 29, 2026 — the largest crypto theft on record. Regulators walked away pushing exchanges to hold more customer assets in cold storage, tighten access controls, monitor deposits and withdrawals continuously, and sharpen their incident-response plans.

The Virtual Asset User Protection Act already forces South Korean exchanges to keep at least 80% of user assets in cold wallets. Talks at the meeting explored lifting that bar sharply, and some reports point to a level around 99%, according to ZyCrypto. The FSC hasn't announced a final change; its public statements stress the need for more offline holdings to blunt breach damage but stop short of naming a new mandatory number.

Real-world ratios are already all over the map. Upbit says it keeps more than 99% of assets offline, while other major platforms sit in the mid-80s to mid-90s. That gap matters: a higher threshold would shrink the liquid assets available for instant withdrawals, and smaller exchanges would feel the squeeze harder than the big players that already run elevated offline ratios.

Investigators have tied the Binance attack to North Korea's TraderTraitor group, which compromised the exchange's transaction-signing systems. Stablecoin issuers froze about half the stolen funds, and Binance has pledged to cover every loss from its reserves and company funds.