MultiversX Faces Upbit Crackdown After Mainnet Exploit

South Korean exchange Upbit designated all MultiversX (EGLD) trading pairs as “trading caution” items on 21 September 2026, two days after a mainnet exploit forced the network to halt block production. The exchange suspended EGLD deposits and withdrawals on 19 September at 5:47 p.m. KST and warned that it may terminate EGLD trading support entirely if the incident remains unresolved.

A VM-Level Flaw Halted the Entire Network

MultiversX halted the network on 19 September and on 20 September confirmed that an attacker had exploited a virtual machine-layer atomicity flaw that allowed invalid state changes to settle on the ledger.The vulnerability credited accounts without matching debits, a particularly dangerous fault on MultiversX’s sharded, parallel-processing architecture, where a corrupted state can propagate across shards. Developers paused block production on 19 September to prevent new transactions from stacking on top of the corrupted records.Co-founder Beniamin Mincu said in a public update that “the attacker’s accounts have been identified, seized and frozen” in coordination with major global exchanges. He also said that funds are safe and that law enforcement is involved. No confirmed financial losses have been publicly disclosed. The team characterized the incident as “contained” but has not yet provided independent verification.

Exchanges Respond With Suspensions and Caution Tags

Upbit’s “trading caution” designation covers the EGLD/KRW, EGLD/BTC, and EGLD/USDT pairs. The exchange’s review period runs from 21 September through 19 to 23 October, after which it may lift the warning, extend the review, or delist EGLD. Withdrawals will resume before deposits when transfers restart.Bithumb also suspended EGLD transfers on 19 September. Kraken placed EGLD pairs in cancel-only mode, and Coinbase reported delayed sends and receives beginning the same day. The parallel suspensions across four exchanges leave EGLD holders with limited exit routes until the network fully recovers. South Korean exchanges carry particular weight for EGLD liquidity, and the caution tag effectively limits the token's activity on a key trading market.

Price Drop and the Recovery Patch Timeline

EGLD fell roughly 8.7% between 18 September and 20 September, declining from $4.14 to $3.78, before rebounding to $4.28 on the containment news and trading around $3.95 later. The token dropped as low as $3.50 during the halt before recovering on the co-founder’s assurances.Trading volume spiked to approximately $10.18 million on 20 September, compared with $3.35 million two days earlier, as traders repositioned around the halt. MultiversX engineers said a recovery patch is undergoing shadow-fork testing and could execute within one to two days. The team is evaluating a targeted purge that removes only exploit-specific invalid changes while preserving legitimate transaction history, rather than a full rollback to the pre-attack state. A full technical incident report will follow once the response is complete, according to the project’s disclosure. The outcome of Upbit’s review, expected by late October, will signal whether EGLD retains its Korean exchange listings.