Bithumb Faces 6-Month Suspension In South Korea Over AML, KYC Violations

bitcoinistPublished on 2026-03-10Last updated on 2026-03-10

Abstract

South Korean cryptocurrency exchange Bithumb faces a six-month partial suspension and CEO reprimand from the Financial Intelligence Unit (FIU) for alleged AML and KYC violations under the Special Financial Transactions Act. The sanctions follow a major February system error where an employee mistakenly distributed over $43 billion worth of Bitcoin to users, of which 99% was recovered. The incident exposed serious internal control failures, as Bithumb's actual reserves were far lower than the erroneously distributed amount. The FIU will hold a sanctions review meeting later this month to finalize repercussions. While new users will be unable to transfer digital assets, existing users remain unaffected. The event has prompted broader regulatory inspections of other major Korean exchanges.

The South Korea-based cryptocurrency exchange, Bithumb, is facing significant legal and operational challenges following a major system error in February. This resulted in more than $43 billion worth of Bitcoin (BTC) being distributed to users, prompting scrutiny from regulatory bodies.

The Financial Intelligence Unit (FIU) has preliminarily notified Bithumb of a six-month partial suspension of its business for alleged violations of Anti-Money Laundering (AML) and Know Your Customer (KYC) regulations under the Special Financial Transactions Act.

Bithumb’s Business Operations Under Fire

According to local media reports, the FIU, part of the Financial Services Commission (FSC), has expressed concerns regarding Bithumb’s interactions with an undeclared overseas virtual asset operator and the exchange’s failure to fulfill KYC obligations.

The preliminary sanctions include a six-month business suspension and a reprimand for the company’s CEO, Lee Jae-won. Although new members will be unable to transfer digital assets, existing users will still be able to deposit and withdraw both Korean won and cryptocurrency without issue.

Notably, the country’s Financial Intelligence Unit plans to conduct a sanctions review committee meeting later this month to determine the final level of repercussions for Bithumb.

In response to the notification, a Bithumb representative clarified that this measure is currently a preliminary step, indicating that adjustments to the sanctions could still be made. He noted that the restrictions will only apply to new users’ virtual asset transfers.

‘Ghost Bitcoin Incident’

This latest development follows pressure from lawmakers in South Korea for regulators to take action following the incident on February 6.

Reports indicate that financial authorities have created an emergency response team, collaborating with the Digital Asset eXchange Alliance (DAXA), a self-regulatory organization representing domestic exchanges.

This team has begun inspecting asset verification and internal control systems at four other major platforms—Upbit, Coinone, Korbit, and GOPAX. Any deficiencies discovered could be integrated into DAXA’s self-regulatory guidelines, potentially influencing future cryptocurrency legislation in South Korea.

For context, the incident that prompted these measures stemmed from a mistake involving a promotional event at Bithumb, where an employee mistakenly distributed 620,000 Bitcoin, valued at over $40 billion, among 249 users.

Fortunately, 99% of the distributed BTC was recovered. However, the event raised serious questions about the exchange’s internal controls and ledger management practices.

Previous regulatory filings indicated that Bithumb only held 175 BTC in its own reserves and less than 50,000 Bitcoin when accounting for both its assets and those held by customers.

This discrepancy suggests that the exchange’s systems failed to prevent the erroneous transaction, causing irregular distributions that distorted market prices.

As Kim Jiho, a spokesperson for the ruling Democratic Party, remarked, the “ghost Bitcoin incident” exposed not just a simple input error but deeper structural weaknesses within cryptocurrency exchanges’ internal control frameworks.

The daily chart shows the total crypto market cap’s valuation climbing above $2.3 trillion as of Monday. Source: TOTAL on TradingView.com

Featured image from Shutterstock, chart from TradingView.com

Related Questions

QWhat is the main reason for Bithumb facing a six-month partial suspension in South Korea?

ABithumb is facing a six-month partial suspension for alleged violations of Anti-Money Laundering (AML) and Know Your Customer (KYC) regulations under the Special Financial Transactions Act.

QWhat specific event in February triggered the regulatory scrutiny on Bithumb?

AA major system error in February resulted in over $43 billion worth of Bitcoin being mistakenly distributed to users, an incident referred to as the 'ghost Bitcoin incident'.

QWhat are the specific restrictions that will be imposed on Bithumb during the suspension?

ANew members will be unable to transfer digital assets, while existing users will still be able to deposit and withdraw both Korean won and cryptocurrency without issue.

QWhat broader regulatory action has been taken in response to the Bithumb incident?

AFinancial authorities have created an emergency response team and are inspecting asset verification and internal control systems at four other major platforms: Upbit, Coinone, Korbit, and GOPAX.

QWhat did the 'ghost Bitcoin incident' reveal about Bithumb's operations according to a ruling party spokesperson?

AAccording to Kim Jiho, a spokesperson for the ruling Democratic Party, the incident exposed deeper structural weaknesses within cryptocurrency exchanges' internal control frameworks, not just a simple input error.

Related Reads

Bitcoin Withdrawals Continue: 8 Years of Storage in a Coldcard Cold Wallet Ended in Zero

Coldcard Hardware Wallet Hacked: Losses Mount Due to Vulnerable Seed Generation A critical vulnerability in Coldcard hardware wallets has led to a continued wave of fund thefts. According to Galaxy Research, the total stolen has reached 1,367.05 BTC (approx. $88.6 million) from 4,585 addresses, a significant increase from the initial 594.5 BTC reported on July 30, 2026. Most of the stolen funds remain on the attackers' addresses. The issue is not with the current firmware, which Coinkite has updated, but with seed phrases generated on vulnerable devices between March 2021 and the release of fixed firmware versions. Due to a programmer error, devices switched from using a hardware random number generator to the software-based Yasmarang generator, which was initialized with publicly accessible data like the chip's serial number. This made the seed phrases predictable through offline brute-force attacks, meaning wallets remain at risk until funds are moved to a new wallet generated with the patched firmware. Affected devices include Mk2/Mk3 with firmware 4.0.1–4.1.9 (and up to 5.0.3), Mk4/Mk5 up to version 5.6.0, and Q models up to 1.5.0Q. The only exceptions are seeds created with a high-entropy method like at least 50 independent dice rolls or a strong unique BIP-39 passphrase. All other owners must generate a new seed on the fixed firmware and transfer their assets. A case highlighting the human impact involves a 39-year-old long-term investor who lost 2 BTC (approx. $130,000) in minutes. He had accumulated the Bitcoin over eight years through physical labor, viewing it as a financial lifeline and a retirement plan in a country suffering from hyperinflation. His story underscores that even conservative "buy and hold in cold storage" strategies can be compromised by such underlying technical flaws. From a technical perspective, this incident echoes historical failures where weak random number generators undermined cryptographic security, challenging the assumption that offline storage is automatically foolproof.

cryptonews.ru2h ago

Bitcoin Withdrawals Continue: 8 Years of Storage in a Coldcard Cold Wallet Ended in Zero

cryptonews.ru2h ago

Trading

Spot
活动图片