Exchanges / Upbit
30-second risk check: Upbit
Upbit Risk Rating, Licences and Safety Review
upbit.com · Official site verified ↗Likely contracting entity: Dunamu Inc.Registered Virtual Asset Service Provider
Entity and licence perimeter · Moderate Risk
Is Upbit safe? Cexvia rates it Moderate Risk at 70/100.
For South Korea users, the mapped entity is Dunamu Inc. under Registered Virtual Asset Service Provider. Its strongest area is Operations & user protection; the main observed concern is Security & incident history.
Evidence for this conclusion ↓Run the 15-point safety checklist ↗Cexvia Exchange Safety RatingA higher score means lower observed risk
Upbit70Moderate Risk
Security52Asset & 58Corporat72Regulatory & legal standing78Corporate transparency72Asset & solvency transparency58Security & incident history52Operations & user protection81
Upbit performs best in Operations & user protection at 81/100. Its main risk is Security & incident history at 52/100.
- 01
Upbit is represented by 2 published legal or operator records. Each record is assessed separately because regulatory scope, products and customer protections vary by entity and region. Evidence ↓
Selected: KR / Dunamu Inc. · Verified 2026-07-27
Overall safety score70Moderate Risk
Checks completed5 / 5
Upbit Licences and Legal Entities
Which company operates Upbit in your region, and what licence does it hold?
Upbit is represented by 2 published legal or operator records. Company registration, an active authorisation, a pending application and an operator-disclosure gap are not treated as equivalent evidence.
RegionContracting entityRegulatory recordScopeStatusChecked
What does the licence record actually verify?
- Named legal entity and jurisdiction
- Permitted or registered activities
- Current public-record status at the verification date
Does a licence guarantee that customer funds are safe?
- Protection against all asset loss
- Global coverage for every user or product
- Complete solvency or future regulatory status
Regulatory & legal standingComplete
78score / 100Weight 25% · Confidence 88%
Published entities and regional permissions are assessed separately; unverified scope is not presented as one global licence.
- Entities checked individually
- Scope kept separate
- Registration is not a full licence
Score contribution0.2 / 25
Why did this area receive this score?
Evidence supporting the scoreEntities checked individually · Scope kept separate · Registration is not a full licence
What users should watchPublished entities and regional permissions are assessed separately; unverified scope is not presented as one global licence.
What information is still missing?No material public-information gap currently affects this conclusion.
1 source records · Reviewed 2026-07-27Corporate transparencyPrimary evidence
72score / 100Weight 15% · Confidence 82%
Entity, product and operator disclosure quality is assessed directly; private consolidated financial information is often limited.
- Entity disclosure scored
- Product scope checked
- Private financials often limited
Score contribution0.1 / 15
Why did this area receive this score?
Evidence supporting the scoreEntity disclosure scored · Product scope checked · Private financials often limited
What users should watchEntity, product and operator disclosure quality is assessed directly; private consolidated financial information is often limited.
What information is still missing?Primary evidence
1 source records · Reviewed 2026-07-27Asset & solvency transparencyLimited coverage
58score / 100Weight 20% · Confidence 62%
Reserve disclosures are treated as evidence about specified assets and dates, not proof of complete liabilities or group solvency.
- Reserve source connected
- Liabilities need review
- Solvency not inferred
Score contribution0.1 / 20
Why did this area receive this score?
Evidence supporting the scoreReserve source connected · Liabilities need review · Solvency not inferred
What users should watchReserve disclosures are treated as evidence about specified assets and dates, not proof of complete liabilities or group solvency.
What information is still missing?Limited coverage
1 source records · Reviewed 2026-07-27Security & incident historyComplete
52score / 100Weight 15% · Confidence 86%
Verified historical incidents remain in the record alongside remediation and current account-security controls.
- History retained
- Remediation recorded separately
- Current controls do not erase incidents
Score contribution0.1 / 15
Why did this area receive this score?
Evidence supporting the scoreHistory retained · Remediation recorded separately · Current controls do not erase incidents
What users should watchVerified historical incidents remain in the record alongside remediation and current account-security controls.
What information is still missing?No material public-information gap currently affects this conclusion.
1 source records · Reviewed 2026-07-27Operations & user protectionPrimary evidence
81score / 100Weight 25% · Confidence 67%
Official status or notice channels are connected. Missing real-time coverage is reflected in confidence and is not treated as normal operation. Complaint evidence remains limited and is not treated as proof of safety.
- Official channel connected
- Asset status is time-sensitive
- Anonymous reviews excluded
- Market data connected
Score contribution0.2 / 25
Why did this area receive this score?
Evidence supporting the scoreOfficial channel connected · Asset status is time-sensitive · Anonymous reviews excluded · Market data connected
What users should watchOfficial status or notice channels are connected. Missing real-time coverage is reflected in confidence and is not treated as normal operation. Complaint evidence remains limited and is not treated as proof of safety.
What information is still missing?Primary evidence
3 source records · Reviewed 2026-07-27Upbit Rating Explained
What raises or lowers the Upbit rating, and what remains unknown?
Missing information reduces confidence, but Cexvia does not treat an undisclosed fact as proof of wrongdoing.
Main factors in the Upbit rating
Operations & user protection
810.2 weightedOfficial status or notice channels are connected. Missing real-time coverage is reflected in confidence and is not treated as normal operation. Complaint evidence remains limited and is not treated as proof of safety.
Regulatory & legal standing
780.2 weightedPublished entities and regional permissions are assessed separately; unverified scope is not presented as one global licence.
Corporate transparency
720.1 weightedEntity, product and operator disclosure quality is assessed directly; private consolidated financial information is often limited.
Asset & solvency transparency
580.1 weightedReserve disclosures are treated as evidence about specified assets and dates, not proof of complete liabilities or group solvency.
Security & incident history
520.1 weightedVerified historical incidents remain in the record alongside remediation and current account-security controls.
What should users verify before deciding?
Corporate transparency
Public evidence for Corporate transparency remains primary evidence, so this conclusion is less certain.
Asset & solvency transparency
Public evidence for Asset & solvency transparency remains limited coverage, so this conclusion is less certain.
Operations & user protection
Public evidence for Operations & user protection remains primary evidence, so this conclusion is less certain.
Scope limitation
This profile prioritises entities most relevant to exchange users and is not a complete corporate tree.
Scope limitation
Product availability and contracting entities can vary by residence and account type.
On-chain transparency
What can be observed on Upbit's public wallets?
Observed assets, stablecoin flows and wallet coverage for publicly identified Upbit addresses.
Verified wallet data has not been connected for this exchange yet.
View full on-chain data ↗Upbit Security Monitoring
Is Upbit affected by outages, hacks, phishing or complaint clusters?
9 risk-signal families tracked · 4 automated or configured · 5 require analyst review
Official service status
Official incidents and maintenance are monitored at the published venue.
- Check frequency
- Every 5 minutes
- Rating impact
- Eligible after validation
Independent probes
Public API and domain reachability are checked independently.
- Check frequency
- Every 5 minutes
- Rating impact
- Eligible after validation
Security incidents
Security incidents, outages, remediation and compensation are reviewed as separate facts.
- Check frequency
- On change + weekly review
- Rating impact
- Eligible after validation
Reserves and wallets
Published reserve reports and wallet evidence are captured with their date and scope.
- Check frequency
- Daily
- Rating impact
- Eligible after validation
Account controls
MFA, allowlists, anti-phishing and withdrawal protections are checked from official guidance.
- Check frequency
- On change + weekly review
- Rating impact
- Eligible after validation
Legal and regulatory
Entity, licence, registration, application and enforcement states are kept distinct.
- Check frequency
- On change + weekly review
- Rating impact
- Eligible after validation
Domain and phishing
RDAP, DNS, TLS and certificate changes are compared with the verified official domain.
- Check frequency
- Daily
- Rating impact
- Context only
Vulnerability signals
Potential product and dependency matches are queued for validation.
- Check frequency
- Daily
- Rating impact
- Never scored directly
Verified complaints
Official case references and structured evidence are mapped by venue and entity.
- Check frequency
- On change + weekly review
- Rating impact
- Context only
Upbit Safety and Regulatory News
Has Upbit reported hacks, withdrawal problems or regulatory action?
No major event currently meets the publication threshold. Continue checking withdrawal status, official notices and recent user reports.
Exchange Safety, Reserves and Withdrawals
Is Upbit safe? Check its reserves, security incidents and withdrawal risk.
Are reserves transparent and is solvency verifiable?
58/100Reserve disclosures are treated as evidence about specified assets and dates, not proof of complete liabilities or group solvency.
- Reserve source connected
- Liabilities need review
- Solvency not inferred
Has the exchange suffered hacks or major security incidents?
52/100Verified historical incidents remain in the record alongside remediation and current account-security controls.
- History retained
- Remediation recorded separately
- Current controls do not erase incidents
Are withdrawals working and are users protected?
81/100Official status or notice channels are connected. Missing real-time coverage is reflected in confidence and is not treated as normal operation.
- Official channel connected
- Asset status is time-sensitive
- Missing is not normal
- Anonymous reviews excluded
- Comparable sample limited
Fund-storage guidance
Limited long-term custody
- How to use it
- Suitable for normal trading with controlled exchange balances.
- Higher-risk use
- Avoid using the exchange as a single long-term custody location.
- Why
- Operations & user protection is the strongest observed area, while Security & incident history limits a stronger conclusion.
Account, Deposit and Withdrawal Checklist
Opening an account, holding funds or unable to withdraw? Start here.
- 01Verify the official domain and app publisher
- 02Confirm the legal entity named in the account agreement
- 03Check whether the selected product is covered in your region
- 04Start with the minimum deposit
- 05Test one withdrawal
- 06Enable strong account security
- 07Avoid keeping unnecessary long-term balances
Compare Exchange Safety
How does Upbit compare with other exchanges on risk and security?
ExchangeRiskScoreRegulatorySecurityConfidence
Before you deposit
Run the safety checklist for Upbit
Check the official domain, legal entity, licence, reserves, incident history and your exit route in one interactive worksheet.
FAQ
Questions about Upbit
Is Upbit safe?
Upbit is currently rated Moderate Risk at 70/100. This reflects observed public evidence and is not a guarantee of safety.
Is Upbit regulated?
2 legal-entity records are mapped in this Passport. Each record has a jurisdiction-specific status and scope.
Which entity serves the selected region?
South Korea: Dunamu Inc. — Registered Virtual Asset Service Provider.
Does Upbit publish reserve or solvency evidence?
Reserve disclosures are treated as evidence about specified assets and dates, not proof of complete liabilities or group solvency.
Should funds be stored on Upbit long term?
Limited long-term custody. Suitable for normal trading with controlled exchange balances. Avoid using the exchange as a single long-term custody location.
Upbit · Official Records and Verifiable Evidence
Upbit licence, reserve, security and operating sources
Open the original records used to check the exchange, including the verification date and the conclusion each source supports.
Platform terms · Dunamu / Upbit
Tier B↗Upbit Korea Terms of Use
Official terms used to verify the contracting entity and service scope.
Regulator · Monetary Authority of Singapore
Tier A↗MAS Directory — Upbit Singapore Pte. Ltd.
Regulatory record used to verify the legal entity, status and permitted scope.
Market data · CoinMarketCap
Tier B↗Upbit — CoinMarketCap exchange profile
Third-party market-quality data used as a supporting signal.
Reserve disclosure · Upbit
Tier B↗Upbit reserve disclosure
Published reserve or asset-disclosure evidence used in the solvency assessment.
System status · Upbit
Tier B↗Upbit service status
Official service-status evidence used in the operational assessment.
Evidence coverage · Cexvia methodology
Method↗Cexvia complaint evidence standard
Complaint comparisons use verifiable primary evidence. The current cross-platform sample remains limited.
Cexvia ratings reflect observed risk under available public evidence. A higher score means lower observed risk, not guaranteed safety. Coverage, confidence, redlines and score direction are published separately. This page is not investment, legal or custody advice. Commercial relationships do not change scores or suppress verified evidence.