Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed
Zoomfund (줌펀드)
fintech · KR · East Asia
Korean online investment-linked finance platform Zoomfund blocked access to its homepage and app after a hacker used abnormal transfer requests to move about KRW 300M of customer deposits from its custodian to third-party accounts. The FSS opened an on-site inspection and the company pledged full refunds.
Original: 피해 고객에 전액 반환
- First disruption
- unknown
- First public signal
- Nov 2 (News1 report on FSS on-site inspection)
- Acknowledged
- Nov 2
- Restored
- not yet
- Duration
- not established
- DFX first recorded
- Nov 5 14:58 UTC
What was restricted
Zoomfund blocked access to its homepage and app to prevent further damage, cutting customers off from the platform; about KRW 300M of customer deposits taken.
Financial impact: About KRW 300M (roughly USD 0.2M) customer deposits taken; company pledged full refund (confirmed by company per News1)
Cause, kept in separate layers
- What the institution said
- Hacker submitted abnormal transfer requests; about KRW 300M of customer deposits held at a separate deposit institution moved to third-party accounts
- DFX classification
- Confirmed cyber (cyber: confirmed)
- Analytical hypothesis (not established)
- Fits the Korean financial-sector intrusion wave of Sep to Oct 2026, but no link has been stated by authorities.
- Conflicting reports
- An earlier DFX register gives 25 Oct 2026 as the hack date; the News1 article read here does not state it, so first_disruption is left null.
Dependencies
A dependency is a documented relationship. It is not evidence that the provider was compromised.
- Provider: Unnamed deposit custodian institution (holds customer deposits separately; executed the abnormal transfer requests), verified
Evidence
- News1 · 2026-11-02 · ko