54m atrás
South Korea's FSS moves toward sanctions on Bithumb over internal control lapses
SEOUL — March 26, 2025 — South Korea's Financial Supervisory Service (FSS) is preparing to sanction cryptocurrency exchange Bithumb after an on-site inspection found material weaknesses in its internal control framework. FSS Governor Lee Chanjin said the process is advancing following a probe triggered by an erroneous Bitcoin payment incident.
The FSS has completed its examination and is moving the case into a final legal review to determine the level and scope of penalties. Lee, speaking at his monthly press briefing, said the inspection confirmed problems in Bithumb's operational controls that warrant regulatory action.
Regulators are also assessing whether Bithumb breached the Act on Virtual Asset User Protection, the 2023 law that tightened requirements for crypto exchanges. The statute sets expectations around security, transparency and user safeguards, including adequate reserves and internal controls designed to prevent operational mistakes and protect customer assets.
South Korea's crypto rulebook has tightened in stages: early measures in 2017 focused on anti-money laundering and know-your-customer checks; 2021–2022 brought real-name account systems and licensing; and since 2023 the Virtual Asset User Protection Act has imposed detailed operational standards. The FSS, long responsible for oversight of banks, securities firms and insurers, has expanded its reach into digital assets through inspections, penalties and, when warranted, referrals for criminal prosecution.
Industry specialists say internal controls are foundational to exchange operations, spanning transaction verification, segregation of customer and house funds, security protocols and automated error detection. Kim Seungju, a professor at Seoul National University's Blockchain Research Center, said internal controls play the same role as in traditional finance: protecting customer assets, ensuring accurate records and preserving operational integrity.
Under South Korean expectations, core control areas include multi-layer transaction confirmations to prevent erroneous transfers, separate customer and operational accounts to safeguard user assets, encryption and access controls to deter unauthorized entry, and monitoring systems that detect issues quickly.
Lee indicated the Bithumb case is being handled alongside broader institutional work aimed at strengthening the digital-asset market as a whole. Analysts note that enforcement actions involving major exchanges often foreshadow sector-wide changes; prior cases in 2021 and 2023 were followed by tougher reporting and operational requirements.
Given South Korea's highly active crypto market—where daily trading volume has at times surpassed activity in traditional equities—regulatory scrutiny is intense. Authorities have sought to balance consumer protection, anti-crime measures, market stability and innovation.
The FSS has several options under current law. Potential outcomes include monetary fines, limits on certain services, mandated remediation of internal controls, heightened supervision and reporting, or, in the most severe scenarios, recommendations to revoke licenses. The specific Bitcoin payment error that prompted the inspection has not been detailed publicly; such incidents commonly involve incorrect amounts, wrong recipient addresses or system failures during transfers, where irreversibility can turn operational mistakes into permanent losses.
If sanctions are imposed, the case is expected to set an important benchmark for how the Virtual Asset User Protection Act is enforced against internal control failures, with implications for other exchanges operating in South Korea.
Disclaimer: This content is for information only and does not constitute trading or investment advice. Conduct independent research and/or consult a qualified professional before making investment decisions.