my timesThe Korea Times

ED Bithumb's 'phantom bitcoins'

Listen

Weak internal controls fuel crisis of trust

A pedestrian walks past a promotional poster for Bithumb. Korea’s second-largest cryptocurrency exchange has come under scrutiny after an internal crediting error worth 620,000 bitcoins occurred during a promotional event.  Yonhap

A pedestrian walks past a promotional poster for Bithumb. Korea’s second-largest cryptocurrency exchange has come under scrutiny after an internal crediting error worth 620,000 bitcoins occurred during a promotional event. Yonhap

The recent fiasco at Bithumb, Korea’s second-largest cryptocurrency exchange, has exposed a fundamental fragility at the heart of the digital asset market. What began as a clerical mistake — mistyping “won” as “bitcoin” during a rewards promotion event — briefly resulted in the notional creation of 620,000 bitcoins, worth more than 60 trillion won ($40.9 billion). The exchange intended to distribute 620,000 won in total; instead, internal ledgers credited customers with an amount equivalent to nearly 3 percent of the global bitcoin supply.

Bithumb identified the error within 20 minutes, but it took another 20 minutes to fully suspend trading and withdrawals. During that window, some recipients sold the erroneously credited assets, triggering a sharp price drop and a temporary price gap of more than 10 percent compared with other exchanges. Customer losses are estimated at around 1 billion won. Although Bithumb has since reversed 99.7 percent of the erroneous bitcoin credits and pledged to compensate affected users, the damage to market confidence is harder to quantify.

The deeper concern is not human error but systemic design. Bithumb’s actual bitcoin holdings total roughly 43,000 coins — far fewer than the 620,000 that circulated briefly on its platform. The exchange’s own corporate holdings reportedly stand at fewer than 200 coins. Yet a single ledger entry allowed a volume of “phantom bitcoin” exceeding its reserves by more than 14 times to trade as if it were real. This was possible because most transactions on centralized exchanges do not occur on the blockchain itself but are settled internally, with balances updated off-chain for speed and convenience.

Such a structure makes internal controls paramount. When they fail, the system permits something uncomfortably close to the digital equivalent of money printing.

This episode recalls earlier warnings from traditional finance. In 2018, Samsung Securities mistakenly credited clients with 2.8 billion shares instead of 2.8 billion won in cash dividends. The firm’s systems failed to flag the impossibility of issuing shares far in excess of the company’s outstanding stock, and some employees even sold the nonexistent shares. The result was regulatory fines and lasting reputational damage, but more importantly, a stark lesson in how operational failures can undermine trust in financial institutions.

Further back still lies the collapse of Barings Bank in 1995. A single trader’s unauthorized derivatives positions, compounded by weak internal controls, brought down a bank with more than two centuries of history. The instruments were complex, but the failure was simple: Management placed excessive trust in internal systems it neither fully understood nor effectively controlled.

Bithumb’s phantom bitcoin belongs to the same lineage of failures. The technology may be new, but the risk is not. When financial systems rely on internal ledgers rather than external settlement, credibility hinges on rigorous safeguards. Without them, scale and speed only magnify the consequences of errors.

Regulators have responded swiftly. Korea’s financial authorities have launched emergency inspections not only of Bithumb but of other domestic exchanges. Yet ad hoc investigations are insufficient. The first phase of digital asset legislation, which came into force in 2024, focuses largely on user protection. The forthcoming second phase must go further, addressing operational transparency, custody, accounting standards and enforceable internal controls.

At a minimum, exchanges should be subject to regular third-party verification of actual asset holdings, mandatory disclosure of discrepancies between on-chain assets and internal ledgers, and automated safeguards that immediately halt trading when abnormal balances appear. With daily trading volumes exceeding 3 trillion won, the cryptocurrency market can no longer be treated as a peripheral experiment.

The lessons are clear. From phantom shares at Samsung Securities to phantom trades at Barings, and now phantom bitcoin at Bithumb, financial history shows that trust collapses not from innovation itself but from weak governance. If cryptocurrency markets aspire to permanence and legitimacy, they must accept that speed and convenience are no substitute for transparency and control.