On this page
Verdict: deep IOST liquidity, a bumpy compliance record
We score Upbit 7.5 out of 10 for IOST. On the market itself it is hard to beat. KRW-IOST is the second-largest IOST market in the world after Binance’s IOST/USDT pair, spreads are usually a fraction of a percent, the KRW trading fee is reported at 0.05%, and IOST withdrawals cost nothing. Upbit also pays the IOST 3.0 airdrop every month and posts clear notices whenever the network changes.
The score would be higher without the baggage. Upbit has lost money to hackers twice, in 2019 and 2025, and Korea’s Financial Intelligence Unit has fined and restricted its operator Dunamu over anti-money-laundering failures. It is also open almost only to Korean residents, so for many readers of this site it is simply not an option.
- IOST liquidity9.0
- Fees8.5
- Withdrawals9.0
- Security record5.5
- Regulation & access5.5
Upbit at a glance
Upbit is run by Dunamu, a Seoul company founded in 2012, and opened in October 2017. It is Korea’s largest won exchange by a wide margin. For IOST it matters even more than its size suggests: an account named dunamuiost holds roughly 30% of the IOST L1 supply, which shows how much of Korea’s IOST sits in Upbit’s custody. Our IOST tokenomics page explains how concentrated the top holders are.
Key facts for IOST buyers
- Operator
- Dunamu Inc. (두나무), Seoul; founded 2012
- Launched
- October 2017
- Registration
- VASP reported to the FIU (first registration, Oct 2021); renewal status not confirmed
- Banking
- Real-name KRW accounts with K Bank
- IOST markets
- KRW-IOST (since 25 Jul 2018), BTC-IOST (since 26 Nov 2018)
- KRW rails
- Deposit free, withdrawal ₩1,000
- IOST network
- IOST mainnet (L1) with memo; no BEP-20 found
- IOST withdrawal fee
- 0 IOST per Upbit’s public guide
- Who can join
- Korean real-name verified users with a K Bank account
KRW-IOST and BTC-IOST on Upbit
Upbit opened its KRW-IOST market on 25 July 2018 and added BTC-IOST on 26 November 2018. It supported the swap to the IOST mainnet in February 2019. Both markets trade with no warning or caution flags. The KRW book is where nearly all the action is; the BTC pair is a niche for people who already hold bitcoin on Upbit.
Depth is the headline. Upbit and Binance each handle roughly a fifth of global IOST volume, while Korea’s next venue, Bithumb, trades a fraction of Upbit’s amount and Coinone barely trades at all. In practice this means orders of a few million won fill close to the screen price. Korean prices can still drift from global ones, so compare with our live IOST price tracker and the IOST to KRW converter before a large trade.
IOST has been flagged on Upbit twice. On 18 November 2019 Upbit briefly designated it a caution asset after node instability halted transfers. On 13 January 2025 the Korean exchange body DAXA issued a call for caution over the IOST 3.0 plan to issue 21.32 billion new IOST. That was a notice to investors, not a formal warning designation, and IOST was never delisted. Our IOST 3.0 explainer covers what changed.
Fees
Upbit’s KRW-market trading fee is reported at 0.05% for both makers and takers, and 0.25% on the BTC and USDT markets. We could not confirm these rates on Upbit’s own fee page, so check them in the app. Won deposits are free and won withdrawals cost ₩1,000.
A worked example: buying ₩1,000,000 of IOST on the KRW market at 0.05% costs about ₩500 in fees. The same trade through the BTC market would cost about ₩2,500, plus the cost of buying the bitcoin first. For IOST, the KRW market is the obvious choice.
| Item | Fee | Note |
|---|---|---|
| KRW market trading | 0.05% | Reported rate, maker and taker |
| BTC market trading | 0.25% | Reported rate |
| KRW deposit | Free | Via K Bank |
| KRW withdrawal | ₩1,000 | Per withdrawal |
| IOST withdrawal | 0 IOST | IOST mainnet, memo on the receiving side |
Source: Upbit public fee guide (withdrawals, KRW); trading rates are secondary reports, confirm in the app.
Deposits, withdrawals and network forks
Upbit moves IOST on the IOST mainnet (L1). We found no support for the BEP-20 IOST token, so do not send BEP-20 IOST from BNB Chain to an Upbit address. L1 deposits to any exchange need the memo shown on the deposit screen; Upbit’s exact memo prompt could not be confirmed, so read the screen carefully and send a small test first. Our guide to sending IOST covers memos, test transfers and recovery requests.
IOST withdrawals are free per Upbit’s public guide, which is unusual. Sending 50,000 IOST to your own IOST wallet would cost nothing on Upbit’s side.
Upbit handles network events transparently. For the go-iost v4.0.0 hard fork it paused IOST deposits and withdrawals from 21 October 2026 at 12:00 KST and reopened them by 26 October 2026, while trading carried on. After the November 2025 hack it reissued deposit addresses and reopened networks in batches from 5 December 2025, and IOST was in that batch. The lesson for any exchange: check the deposit and withdrawal status before you move coins, especially around upgrades.
How Upbit handled the v4.0.0 fork
The monthly IOST airdrop
Upbit takes part in the exchange half of the IOST 3.0 airdrop, a pool of 852.8 million IOST shared among exchanges in proportion to the IOST they held at the snapshot of 15 March 2025 at 09:00 KST. Upbit pays its share in 48 monthly rounds. The first was paid on 10 April 2025 and the 19th on 21 October 2026. Your amount is the pool, times Upbit’s share of exchange-held IOST, times your share of Upbit’s IOST at the snapshot.
You do nothing to claim. The IOST appears in your Upbit balance, and nobody will ask you to connect a wallet or send coins. Upbit also ran the Donnie Finance (DON) airdrops for IOST holders in 2021; DON was later delisted on Upbit and is now withdrawal-only. Our IOST airdrop guide explains the L1 claim route and how to spot fake airdrops.
Hacks, fines and licence status
Upbit has had two serious hot-wallet thefts. On 27 November 2019 about 342,000 ETH, then worth roughly ₩58 billion, was stolen; Dunamu covered it from its own funds. On 27 November 2025, one day after the Naver deal was announced, attackers drained about ₩44.5 billion in SOL, USDC and Solana tokens. Authorities suspect the Lazarus group, and Dunamu covered ₩38.6 billion of customer assets from reserves. No IOST was reported lost in either case.
Cold storage is reported at 98.33% at the end of October 2025, and Dunamu pledged more than 99% after the hack. Korea’s Virtual Asset User Protection Act, in force since 19 July 2024, requires at least 80% cold storage, segregated customer assets and reserves or insurance.
Compliance is the bigger worry. In February 2025 the FIU ordered a three-month restriction on crypto transfers for new customers over about 5.3 million KYC violations. In November 2025 it fined Dunamu ₩35.2 billion for AML failures. In July 2026 the Financial Supervisory Service opened sanction proceedings over the 2025 hack. Upbit was the first exchange registered with the FIU, in October 2021, but we could not confirm whether its three-year renewal has been approved. Treat that as an open question.
Dunamu and the Naver merger
On 26 November 2025 Naver Financial announced it would acquire 100% of Dunamu through a share swap valued at about ₩15.13 trillion. The deal has not closed. The swap date moved from 30 September 2026 to 31 December 2026, and a filing on 7 October 2026 moved it again to 31 March 2027, with the shareholder meeting set for 26 February 2027. Competition and financial regulators are still reviewing it. For IOST holders, the merger changes nothing day to day, but it adds uncertainty about future policy.
A frequent Korean search is "IOST Kakao". We found no official link between IOST and Kakao or its Kaia (formerly Klaytn) chain. Our IOST in South Korea page covers the local market, tax plans and the other exchanges.
How to buy IOST on Upbit
Verify your identity
Complete Korean real-name verification in the Upbit app.
Link K Bank
Connect a K Bank account in your own name and deposit won for free.
Buy on KRW-IOST
Open the KRW market, search IOST (아이오에스티) and use a limit order for size.
Hold or withdraw
Keep IOST on Upbit for airdrop rounds, or withdraw on the IOST mainnet for free. Our how to buy IOST guide covers other routes.
Pros and cons
Pros
- Second-deepest IOST market in the world, tight spreads
- KRW trading fee reported at 0.05%
- Free IOST withdrawals
- Monthly IOST 3.0 airdrop over 48 rounds
- Clear notices on forks and network pauses
Cons
- Hot-wallet hacks in 2019 and 2025
- ₩35.2bn FIU fine and other AML sanctions
- VASP renewal status not confirmed
- Korean residents only; limited English support
- IOST mainnet only, no BEP-20
Outside Korea?
Upbit is effectively closed to foreigners. A common route is to buy crypto with a card on CEX.IO, an exchange running since 2013, then send it to an exchange that lists IOST. Some coins on CEX.IO are restricted for South Korean users.
CEX.IO does not accept residents of Japan. In Japan, buy IOST through an exchange registered with the Financial Services Agency (FSA).
Alternatives
Inside Korea, Bithumb is the only other IOST/KRW market with real activity, and Coinone’s book is too thin to rely on. Korbit and Gopax do not list IOST, and binance.com does not serve Korean residents. Outside Korea, the deepest option is Binance’s IOST/USDT pair, and Thai residents have Bitkub’s IOST/THB book. Compare every venue on our IOST exchanges page.
| Exchange | IOST pairs | Region | Notes |
|---|---|---|---|
| Upbit | KRW-IOST, BTC-IOST | Korea | Deepest KRW book, monthly airdrop |
| Bithumb | IOST/KRW | Korea | Much smaller than Upbit but active |
| Coinone | IOST/KRW | Korea | Very thin; wide spreads |
| Binance | IOST/USDT | Global (not Korea) | Deepest IOST book worldwide |
| Bitkub | IOST/THB | Thailand | Only THB order book |
Source: exchange APIs and CoinGecko tickers; liquidity described in relative terms.
IOST is volatile even by crypto standards: it sits more than 99% below its January 2018 high and its sharp spikes in September and October 2026 retraced within days. Read is IOST safe? before you buy, and never put in money you cannot afford to lose.
Questions people ask
Does Upbit list IOST?
Yes. Upbit has listed IOST against the Korean won since 25 July 2018 and against bitcoin since 26 November 2018. Both KRW-IOST and BTC-IOST trade with no warning or caution flags on Upbit’s market list.
How much does it cost to withdraw IOST from Upbit?
Upbit’s public deposit and withdrawal guide lists the IOST withdrawal fee as 0 IOST. Withdrawals go out on the IOST mainnet (L1), so the receiving exchange or wallet must support that network. Check the fee in the app before you send, as exchanges can change it.
Does Upbit pay the IOST airdrop?
Yes. Upbit takes part in the IOST 3.0 exchange airdrop based on the 15 March 2025 09:00 KST snapshot and pays it in 48 monthly rounds. The first round was paid on 10 April 2025 and the 19th on 21 October 2026. The amount depends on Upbit’s share of exchange-held IOST and your share of Upbit’s IOST at the snapshot.
Can foreigners use Upbit to buy IOST?
Mostly not. Upbit requires Korean real-name verification and a K Bank account in your own name, so in practice it serves Korean residents and nationals. Non-residents usually buy IOST on a global exchange that lists IOST instead.
Was IOST ever delisted or flagged on Upbit?
IOST has never been delisted on Upbit. It was briefly designated a caution asset on 18 November 2019 after node instability, and DAXA issued a call for caution on 13 January 2025 over the IOST 3.0 supply change. That 2025 notice was not a warning designation, and both IOST markets trade normally.
Is Upbit safe after its hacks?
Upbit lost 342,000 ETH in November 2019 and about ₩44.5 billion of Solana-network assets in November 2025, and Dunamu covered customer losses from its own funds both times. It reports keeping almost all customer crypto in cold storage. It has also been fined by the FIU, so weigh the security record against its very deep IOST market.
Sources & further reading
- Upbit market list API (KRW-IOST, BTC-IOST) · exchange API
- Upbit deposit and withdrawal fee guide · exchange fee data
- Upbit notice — IOST v4.0.0 hard fork · exchange notice
- Upbit notice — IOST airdrop, 19th round · exchange notice
- Upbit notice — DAXA call for caution on IOST · exchange notice, 13 Jan 2025
- Korea Financial Intelligence Unit · regulator
- Financial Services Commission (Korea) · regulator
