← Back to Archive
hackHigh10/24/2025

AliExpress Korea Hack Diverts 8.6 Billion Won in Seller Funds

AliExpress Korea

Hackers exploited an OTP vulnerability to hijack seller accounts and steal settlement payments.

AliExpress Korea reported a targeted hack where attackers exploited a flaw in the One-Time Password (OTP) system for business account recovery. The hackers gained access to 107 seller accounts and successfully diverted 8.6 billion won ($6.4 million) in settlement funds to their own bank accounts. The company admitted it did not detect the intrusion until sellers complained about missing payments.

Tags

#e-commerce#hack#fintech#ali-express

Last updated: March 7, 2026