Bithumb said on Feb. 13 users should beware of phishing messages impersonating compensation guidance linked to a Feb. 6 incident involving misdirected random box bitcoin payouts. The exchange said official compensation notices contain no URL links and are provided only through its customer center. It said it does not request IDs, passwords or other personal information, and does not send texts or emails with attachments or ask customers to transfer virtual assets.

The fallout from a large-scale bitcoin mispayment at Bithumb is spreading after a computer error during a \"random box\" event credited 2,000 BTC instead of 2,000 won per winner, creating 620,000 BTC on its internal ledger. Authorities said 125 BTC remains unrecovered, with some proceeds withdrawn to bank accounts and the rest likely swapped into other digital assets. Regulators launched an inspection and officials signaled tougher rules.