Every 5 Minutes: Korea’s New Rule for Crypto Exchanges

In a bid to restore market confidence following a colossal blunder earlier this year, South Korea's financial watchdog has mandated that all cryptocurrency exchanges verify user asset balances at five-minute intervals. This directive comes on the heels of a staggering error that exposed deep-seated vulnerabilities across the industry.

The catalyst for these new regulations was a promotional event in February, during which Bithumb inadvertently distributed 2,000 BTC to each participant, instead of the intended 2,000 Korean won (approximately $1.40). This mishap resulted in a staggering $42 billion in misplaced cryptocurrency, prompting the Financial Services Commission (FSC) to conduct emergency inspections across the country's five major exchanges. The findings revealed a disturbing lack of oversight, with most exchanges only reconciling their accounts once every 24 hours. Furthermore, three exchanges lacked an automatic shutdown mechanism to halt trading in the event of discrepancies, while four did not have a multi-step approval process for high-risk manual transactions. Two exchanges had even failed to segregate their general accounts from those used for high-risk transactions, a fundamental safeguard.

In response, the FSC unveiled a comprehensive three-pronged reform package on April 6, aimed at bolstering the industry's resilience. Under the new guidelines, exchanges must now conduct automated balance checks every five minutes, triggering alerts and automatic trading suspensions in the event of significant mismatches. Monthly external audits will replace the previous quarterly schedule, and exchanges will be required to disclose their asset holdings on a blockchain-by-blockchain basis, rather than simply providing a coverage ratio.

For high-risk manual transactions, such as event payouts, exchanges must utilize separate accounts, implement validity-check systems that automatically reject incorrect inputs, and require cross-verification by a third party prior to execution. Additionally, the FSC will require exchanges to appoint dedicated risk management officers and establish risk management committees, adhering to standards already expected of traditional financial institutions. Compliance checks will now be conducted twice yearly, with results reported to regulators.

The industry body, DAXA, is expected to complete self-regulatory amendments by the end of this month, with the necessary systems in place by May. Key provisions of these reforms will be incorporated into South Korea's forthcoming second-phase Digital Asset Act, further solidifying the country's regulatory framework for the cryptocurrency industry.