Upbit

Exploit & recovery timeline

1. Nov 26, 2019 · 01:00 UTC
   Attack preparation

   Attacker wallets funded and staged ahead of the private key compromise exploit against Upbit.

2. Nov 26, 2019 · 03:00 UTC
   Exploit executed

   $49.0M drained from Upbit on Ethereum via Private Key Compromise.

3. Nov 26, 2019 · 04:00 UTC
   Detected by SlowMist

   SlowMist flagged the anomalous transactions and published an initial alert.

4. Nov 26, 2019 · 07:00 UTC
   Protocol response

   Upbit paused affected contracts or withdrawals and began tracing outbound flows.

5. Nov 27, 2019 · 03:00 UTC
   Funds traced

   Stolen assets followed through mixers, bridges, and exchange deposit addresses.

6. Dec 26, 2019 · 03:00 UTC
   Funds written off

   No assets recovered; losses absorbed by the protocol, insurers, or users.