1. The Sanctions Process: A Regulatory Test Case
Published 7/20/2026, 6:20:06 PM
The sanctions process against Dunamu (the operator of Upbit) has entered a critical phase that directly threatens the timeline and governance structure of its ₩15.1 trillion (~$10.3 billion) merger with Naver Financial. While the sanctions do not trigger an automatic block, they have contributed to the merger deadline being pushed to December 31, 2026.
1. The Sanctions Process: A Regulatory Test Case
The Financial Supervisory Service (FSS) formally initiated sanctions proceedings against Dunamu on July 18–19, 2026, following a major security breach in late 2025.
- The 2025 Breach: A 54-minute hack on November 27, 2025, resulted in the theft of ₩44.5 billion (~$32M) in Solana-based tokens. Dunamu covered ₩38.6 billion of these losses from its own balance sheet.
- Legal Ambiguity: A primary complication is that South Korea’s Virtual Asset User Protection Act currently lacks explicit provisions for sanctioning exchanges over hacking or IT failures. The FSS is attempting to apply existing rules interpretively, creating a landmark legal test.
- Cumulative Pressure: This process runs parallel to a separate ₩35.2 billion (~$25M) fine proposed for anti-money laundering (AML) violations involving over 5 million KYC failures.
2. Implications for the Naver Financial Merger
The merger, originally targeted for mid-2026, is now facing significant headwinds due to the intersection of these sanctions and evolving legislation.
| Metric/Event | Details |
|---|---|
| New Completion Deadline | December 31, 2026 |
| Key Shareholder Meeting | November 19, 2026 |
| Stock-Swap Ratio | 1:2.54 (Naver Financial shares per Dunamu share) |
| Primary Regulatory Risk | Digital Asset Basic Act (Phase 2) |
| Proposed AML Fine | ₩35.2 billion (~$25 million) |
- Disclosure Controversy: Regulators are scrutinizing the fact that Upbit delayed the public announcement of its 2025 hack until after a major Naver Financial merger event had concluded that same day. This has raised questions about management's transparency and fiduciary duties.
- Governance Deadlock: The most severe threat is the upcoming Digital Asset Basic Act. If passed, it may impose shareholder stake limits that would make the planned 100% ownership structure (where Dunamu becomes a wholly-owned subsidiary) legally impossible without massive divestment by Dunamu’s founders.
- Due Diligence & Approval: The FSS sanctions findings will likely be integrated into the Korea Fair Trade Commission (KFTC) antitrust review, potentially leading to new regulatory conditions or a reassessment of the deal's valuation by Naver Financial.
3. Conclusion
The sanctions process introduces timing uncertainty that makes the December 31, 2026, deadline highly optimistic. While Dunamu's self-funded reimbursement of users has mitigated some public backlash, it has not granted regulatory immunity. The merger's success now depends less on commercial synergy and more on the final severity of FSS penalties and the specific language of the forthcoming Digital Asset Basic Act.