# GOPAX halts trading and takes withdrawal requests by email Author: Hatice Ertaş Language: English Published: 2026-11-07T07:33:45+03:00 Updated: 2026-11-07T14:26:37+03:00 ![A storage device in an open steel drawer, with a disconnected red network cable in front.](https://kriptometa.com/uploads/gopax-alim-satimi-durdurdu-cekimleri-basvuruya-bagladi-213bbff0eb50_article.webp) ## Key takeaways - Crypto deposits and standard withdrawals stopped at 05:55 UTC on November 6. GOPAX halted trading at 06:53 UTC. - Customers can request a withdrawal to a personal wallet registered in their own name and approved by GOPAX. - Staff process withdrawal requests from 01:00 to 10:00 UTC on weekdays, excluding public holidays. The South Korean exchange cancelled open orders. For now, customers can withdraw crypto only to their own approved wallets. GOPAX has given no date for trading to resume. South Korean [crypto exchange](https://kriptometa.com/en/best-crypto-exchanges) GOPAX stopped accepting crypto deposits and disabled withdrawals on its website and mobile app on November 6. Trading stopped just under an hour later. A GOPAX representative told [Yonhap News Agency](https://en.yna.co.kr/view/AEN20261106011751320) that a group had emailed the exchange claiming to have hacked it. Staff had yet to verify the claim. GOPAX had received no reports of lost assets at the time, according to the Yonhap story also [carried by the Korea JoongAng Daily](https://www.koreajoongangdaily.com/business/crypto-exchange-gopax-suspends-withdrawals-trading-following-hacking-threats/12960615). ## When did trading and transfers stop? In its [first notice](https://www.gopax.co.kr/notice/detail?id=2607), GOPAX said it was acting on the financial authorities’ recommendation after data leaks and cyberattacks at South Korean financial institutions. At 2:55 p.m. in Korea (05:55 UTC), it stopped accepting crypto deposits, disabled standard withdrawals and warned customers that trading would be next. GOPAX [confirmed in a second notice](https://www.gopax.co.kr/notice/detail?id=2608) that it had halted trading at 3:53 p.m. Korean time (06:53 UTC) and cancelled all unfilled orders. GOPAX service status after the halt | Service | What customers can do | |---|---| | Crypto deposits | Deposits are suspended. Customers whose earlier deposits have yet to appear in their balance can email support or contact the GOPAX channel on KakaoTalk. | | Crypto withdrawals | Standard web and app withdrawals are closed. Customers can request a transfer to an approved personal wallet. | | Trading | Trading is suspended. GOPAX will announce a reopening date through its official notices. | GOPAX said it planned to move all the crypto it held into cold storage. At the time of Yonhap’s report, the exchange was moving most of its hot-wallet holdings offline. It did not say how much it had already moved or when it would finish. [The Daily Block’s November 6 report on GOPAX withdrawals](https://x.com/thedailyblock/status/2118789011841921091) Cold storage keeps the private keys used to sign transactions offline. When [the exchange holds the keys](https://kriptometa.com/en/glossary/custodial-non-custodial-wallet), customers still need its approval to move crypto to their own wallets. In a March 4, 2025 training video, GOPAX Academy explains how a [personal hardware wallet](https://kriptometa.com/en/set-up-hardware-wallet) stores its private keys. The [section starting at 0:32](https://www.youtube.com/watch?v=8pIf2xCeGwk&t=32s) introduces the device. ## How do withdrawals to personal wallets work? GOPAX’s [withdrawal guide](https://streami.atlassian.net/wiki/spaces/GHC/pages/2396192794) says customers can withdraw only to a personal wallet the exchange supports. Staff must first verify that the address belongs to the customer. GOPAX plans to support withdrawals to other exchanges but has given no start date. Customers can reuse an approved address or register a new one under personal wallet addresses in their app profile. Following the [registration guide](https://streami.atlassian.net/wiki/spaces/GHC/pages/1148125310), they enter the wallet type, asset and [receiving address](https://kriptometa.com/en/glossary/wallet-address), then confirm that the wallet belongs to them. GOPAX asks for ID and a photo showing the customer’s account details and full wallet address together on screen. Staff reject images pieced together from separate pictures. The exchange’s April 29 list of supported wallets includes MetaMask, Ledger Nano and Phantom. Customers send withdrawal requests to help@gopax.co.kr. The email must include their name and phone number, the name and address of their wallet, and the asset and amount they want to withdraw. Some assets also require a [memo or destination tag](https://kriptometa.com/en/glossary/memo-destination-tag). GOPAX warns that it may be unable to recover funds sent to the wrong address. GOPAX also asks customers to attach a photo of themselves holding their ID and a handwritten note. The note must show the date of the request and “GOPAX” or “고팍스”. The customer’s face, ID and note must all be visible in full. Staff review requests and process approved transfers in order. They handle transfers on weekdays from 10 a.m. to 7 p.m. in Korea (01:00 to 10:00 UTC), excluding public holidays. Incomplete requests or extra checks can cause delays. GOPAX does not guarantee same-day transfers. ## What did GOPAX disclose in October? GOPAX reported in its [October 16 notice](https://www.gopax.co.kr/notice/detail?id=2585) that it had found signs of unusual account access going back to early September. In early October, staff found evidence that someone had viewed details such as nicknames and login histories on accounts belonging to seven customers and two current or former employees. The exchange said it secured the accounts, blocked the route used to access them and notified the financial authorities and the Korea Internet & Security Agency. In its [October 27 update](https://www.gopax.co.kr/notice/detail?id=2596), GOPAX said it had confirmed the previous day that more data had leaked. It did not say how many people were affected in total. Customers could check their individual notices to see which details had been exposed. By then, the exchange had found no unauthorised withdrawals or losses of customers’ won or crypto. Its November notices did not link the email to the earlier breach.