South Korean cryptocurrency exchange Gopax has suspended standard trading and withdrawal operations following receipt of a specific hacking threat, implementing comprehensive emergency security protocols to safeguard user holdings. The platform initiated precautionary measures Friday afternoon, temporarily halting normal operational capabilities while systematically transferring all customer digital assets to offline cold storage infrastructure.
According to Bitcoin Magazine, Gopax ceased standard withdrawal functionality at precisely 2:55 p.m. and subsequently suspended trading activities at 3:53 p.m. Friday after receiving a hacking-threat email. As of the reported time, the exchange has not reported any asset losses or unauthorized access incidents resulting from the threat. In response to the security notification, Gopax initiated procedures to transfer all held assets to cold wallets, effectively removing them from internet-connected hot wallet systems that remain vulnerable to remote exploitation.
Cointelegraph reported that the operational suspension encompasses trading activities, deposit functionality, and standard automated withdrawals. While traditional withdrawal mechanisms remain offline during the security review, the exchange has established an alternative manual withdrawal pathway accessible through dedicated customer support channels. This manual process allows verified users to request fund transfers under enhanced security verification protocols while the automated systems remain suspended.
The security response illustrates a proactive threat management approach within South Korea's regulated digital asset marketplace. By immediately transitioning custody of user holdings to cold storage—cryptocurrency wallet systems maintained entirely offline and disconnected from networked infrastructure—Gopax eliminates remote attack vectors that sophisticated threat actors might exploit to compromise private keys or siphon funds. Industry security standards generally recognize cold storage as the most reliable technical safeguard against unauthorized digital asset theft, as these systems require physical access to signing devices rather than remote network penetration.
The chronological specificity of the suspension times—separating withdrawal and trading halts by nearly an hour—suggests the exchange followed graduated incident response protocols designed to prioritize liquidity protection and orderly market closure over immediate complete shutdown. The precise nature and origin of the hacking threat remain undisclosed publicly, with no confirmation regarding whether law enforcement authorities have identified specific threat actors or determined the credibility level of the initial communication.
South Korea maintains stringent regulatory oversight of cryptocurrency exchanges through the Financial Services Commission and related agencies, requiring platforms to implement comprehensive cybersecurity frameworks, maintain insurance protections, and demonstrate operational resilience against digital threats. Gopax operates within this compliance environment, where exchanges face mandatory reporting requirements and security standards exceeding those in many other jurisdictions.
The temporary service restrictions highlight persistent operational security challenges confronting centralized cryptocurrency platforms globally, which must continuously balance customer accessibility demands with protection against evolving cyber threat landscapes. While the immediate suspension creates operational friction for traders requiring urgent liquidity or position management capabilities, the precautionary relocation of assets to cold storage reflects established industry best practices for threat mitigation, prioritizing long-term asset security over short-term transactional convenience.
Users requiring asset access during the suspension must utilize the manual verification process coordinated through Gopax support representatives rather than standard automated interfaces. The exchange has not publicly disclosed a specific timeline for restoration of full trading capabilities or automated withdrawal functionality, indicating that normal operations will likely remain suspended pending completion of comprehensive security audits, threat vector analysis, and potentially coordination with cybersecurity authorities.