GOPAX Has Not Traded in 75 Hours: Inside a 100% Cold-Wallet Exchange

GOPAX printed its last trade at 06:48:12 UTC on Nov. 6. More than 75 hours later, the Korean exchange’s own ticker feed still lists 368 pairs, 254 of them against the won, and not one of them carries a timestamp later than that. The order book did not thin out. The exchange stopped it , cancelled every resting order, and moved the entire customer crypto balance into cold storage.

Neither of the two notices GOPAX posted that afternoon says a hack happened. Both attribute the shutdown to a recommendation from Korean financial authorities and to “최근 금융회사에서 잇따라 발생한 정보 유출 및 해킹 사고,” a run of recent data leaks and hacking incidents at financial companies. On Nov. 9 there was still no resumption notice, and withdrawals were still being taken by email to the support desk rather than by a button in the app. At 09:57 UTC that morning the exchange posted a third notice taking its KakaoTalk chat and phone support offline for a system inspection from 18:08 KST, leaving email as the only route to ask for a withdrawal.

That makes GOPAX the clearest live test of a question Korean regulators have been circling for months: what happens to an exchange when the safe answer to a security scare is to hold nothing online at all.

What Went Dark, and in What Order

The first notice went up at 14:49:45 KST on Friday, Nov. 6, published as notice 2607 . It gave just over five minutes of warning before deposits stopped at 14:55 and the ordinary withdrawal function was switched off. It told customers that trading would be suspended too, without saying when: “구체적인 중단 일정은 확정시 본 공지를 통해 안내 예정입니다,” meaning the schedule would be announced in a later notice once it was fixed.

Trading stopped at 15:53 KST. That is 58 minutes after the withdrawal freeze, and 24 minutes and 52 seconds before the notice explaining the halt was published at 16:17:52 KST. Everyone holding a position had 58 minutes in which they could close or open a trade, but could not take the proceeds off the exchange.

The halt notice is blunt about the mechanics: “등록된 미체결 주문은 모두 취소처리되었습니다,” every unfilled order was cancelled. And on the way out: “이용자 자산의 안전한 보관을 위해 가상자산 전량을 콜드월렛(Cold Wallet)으로 이전하여 보관할 예정입니다,” the full balance of customer crypto would be moved to cold wallets, with withdrawal requests “내부 확인 및 승인 절차를 거쳐 순차적으로 수동 처리,” reviewed and approved internally, then processed manually in sequence.

An edit to that notice at 21:39 KST the same evening did not add a restart date.

Why a Cold Wallet Cannot Serve a Withdrawal

A hot wallet is a key that lives on internet-connected infrastructure. It exists so the exchange can sign outgoing transfers without a human in the loop, which is what makes a withdrawal feel instant at three in the morning. A cold wallet is the opposite: the key is generated and stored offline, and every signature requires a person, or several people, to move a device, approve a transaction and broadcast it.

In normal operation the hot wallet is a buffer sized to net outflows. Deposits and withdrawals mostly cancel, and the buffer absorbs the difference. Take that buffer to zero and the settlement chain becomes an operations queue: one ticket per withdrawal, each checked against the ledger, signed under whatever policy the exchange set, and broadcast by staff.

That is what the notice describes, in plain Korean, without calling it a queue. It is also why the halt had to include trading. An exchange that lets users buy and sell but cannot let them withdraw is a one-way door: positions can be opened and closed, but value cannot leave. GOPAX closed the door completely rather than leave it half-open.

The contrast with how Binance reopened withdrawals in phases after its October incident is instructive. A phased reopen keeps a hot buffer and rations it by asset and by risk tier. GOPAX chose the opposite extreme: no buffer at all, full manual settlement, no published calendar.

The Money Looks Present, With a Caveat the Notices Bury

Solvency is the first thing a customer asks when the withdrawal button disappears, and GOPAX has a recent answer. On Oct. 29 it published an external inspection of customer assets as of Sept. 30, prepared by an outside accounting firm, with two headline ratios.

Won deposits were covered at 116.2%. In the notice’s words: “회사는 고객에 대하여 지급할 금융 대비 116.2%의 원화 자산을 보유하고 있습니다,” the company holds 116.2% of the won assets it owes customers. Customer crypto, measured coin by coin against the internal ledger, came out at about 100.2%: “분산원장 보유 비율은 약 100.2%로 확인하였습니다.”

The caveat sits inside the report itself. The document states that it is not an audit and not a review: “본 실사는 회사의 재무제표가 기업회계기준에 따라 적정하게 작성되었는지의 여부에 대한 의견표명을 목적으로 하는 회계감사(Audit)나 한정적 의견표명을 목적으로 하는 검토(Review) 등의 확인증명을 하는 것은 아닙니다.” It is an agreed-procedures inspection, performed between Oct. 1 and Oct. 15 against a Sept. 30 cut-off, and it says nothing about what customer balances looked like after three days of frozen withdrawals in November.

The honest reading is narrow. The coins appear to have been there on Sept. 30, and nothing in the November notices alleges otherwise. That is not proof of what sits on the wallets today.

What 75 Hours Cost a Holder

Bitcoin is the simplest yardstick. Between the last GOPAX print and 09:20 UTC on Nov. 9, BTC moved from about $75,621 to $74,329 on CoinGecko hourly data, a decline of 1.71%. Inside that window it traded as high as $76,125 and as low as $73,828, a range of roughly 3.1%.

Anyone who wanted out near the local high could not act on it. Anyone who wanted to buy the dip to $73,828 could not either. For a spot holder with a long horizon, 1.7% is noise. For a trader running a won-denominated position through a security scare, three days with no exit is the entire risk, and no solvency ratio addresses it.

The Korean market context sharpens that. Domestic trading had already been shrinking: stablecoin balances on Korean platforms were 18 months into a drain by August , and a multi-day outage gives anyone still on a domestic venue a reason to move.

The Case for the Shutdown, and Its Cost

The precautionary argument is not weak. If an exchange believes customer keys or internal systems may be exposed, the surest way to stop a drain is to stop signing transactions, and moving everything offline does that. The notices frame the decision as a recommendation from the financial authorities rather than a unilateral choice, which also means the restart may not be GOPAX’s to call alone.

What the shutdown does not establish is that anything was stolen, or that the exchange is short of assets. There is no notice of a breach, no on-chain incident the exchange has acknowledged, and no insolvency claim. A reader who concludes “another exchange blew up” is ahead of the evidence.

The cost sits somewhere else. A manual email withdrawal desk is a bottleneck measured in people, and it is opaque: no queue depth, no processing-time estimate, and no way for a customer to check their place in line. An exchange can be fully solvent and still leave users unable to act for a week.

What the Next Notice Has to Say

The next document in the sequence will answer what these four do not. Whether withdrawals return self-serve or stay manual tells you how much hot-wallet buffer GOPAX is willing to run. Whether trading reopens with the same pair list tells you if the outage was operational or a wind-down. Whether the restart notice carries a date, rather than the “확정시” language of the first notice, tells you whether the schedule is now the exchange’s or still the regulator’s.

For the wider Korean market, the signal is whether other venues copy the full-cold posture or keep a rationed buffer. The first option protects keys and breaks liquidity. The second keeps trading alive and keeps a smaller attack surface online. An exchange that has been dark for three days is a live experiment in which cost the industry is willing to pay.