The Nationwide Tax Service (NTS) of South Korea turned a routine enforcement victory right into a historic operational failure this week, leaking non-public keys in a press launch that resulted within the theft of $4.8 million in seized property.
The company revealed unredacted high-resolution pictures of {hardware} wallets containing a visual seed phrase leak, permitting opportunistic on-chain actors to empty 4 million PRTG Tokens remotely.
It was a preventable disaster. As an alternative of securing the crypto seizure in new government-controlled wallets, authorities displayed the unique restoration codes to the general public eye. The funds had been gone inside hours.
Key Takeaways:
- The Leak: The NTS revealed press pictures that includes legible handwritten notes containing the 24-word restoration phrases for seized Ledger wallets.
- The Loss: Thieves drained roughly 4 million PRTG tokens, valued at roughly $4.8 million (6.9 billion KRW), utilizing the uncovered codes.
- The Failure: The incident exposes a important hole in Institutional Custody protocols, as brokers didn’t switch property to safe storage earlier than publicity.
Uncover: The perfect crypto to diversify your portfolio with
How The Nationwide Tax Service of South Korea Misplaced $5 Million in Crypto in Hours
On February 26, the Nationwide Tax Service issued a press launch saying the seizure of 8.1 billion KRW ($5.5 million at the moment) from high-net-worth tax evaders.
Hilarious.
South Korea’s Nationwide Tax Service revealed their latest confiscation of stolen crypto by exhibiting a photograph of the seed phrase they retrieved.
$4.8 million was instantly drained. pic.twitter.com/cKyYBq60Jn— Terence Michael (@ProofOfMoney) March 2, 2026
As an instance the motion, the company included pictures of the bodily property, together with a Ledger {hardware} pockets. Beside the gadget lay a handwritten be aware containing the entire mnemonic restoration phrase, the grasp key that grants full entry to the funds no matter who holds the bodily gadget.
The picture was excessive sufficient decision that the phrases had been legible. For anybody with a fundamental understanding of crypto self-custody, the photograph was equal to posting a checking account quantity and PIN on a billboard.
Based on Gizmodo and native studies, the theft occurred in two waves. A primary actor drained the pockets however, maybe fearing the implications of stealing from the federal government, returned the funds shortly after.
A second thief was much less scrupulous. Roughly 2.5 hours later, this second actor transferred the restored funds out completely.
Police at the moment are investigating, however the blockchain’s immutability makes retrieval troublesome with out the thief’s cooperation.
The Scale of the Loss
The monetary harm is substantial, although market realities could blunt the thief’s precise payday.
The pockets contained 4 million PRTG (Pre-Retogeum) tokens, with a nominal worth of roughly $4.8 million or 6.9 billion KRW. On-chain information reveals the attacker funded the pockets with a small quantity of ETH to cowl fuel charges earlier than executing three speedy outbound transactions.
Whereas the paper loss is almost $5 million, liquidity for PRTG is skinny. Dumping that quantity on open markets would seemingly crash the value, which means the realizable worth for the hacker is considerably decrease.
Nevertheless, for the NTS, the loss is absolute; credit that had been meant to fulfill tax money owed have been wiped from the treasury’s steadiness sheet.
Institutional Custody: What Went Incorrect
This was not a technical hack. It was a failure of process. Institutional custody requires extra than simply seizing a bodily gadget; it mandates the quick switch of digital property to a safe, government-controlled setting.
Leaving funds in a suspect’s unique pockets after which photographing the restoration phrase betrays a basic misunderstanding of how digital bearer property work.
South Korean shares sank 12%, posting the largest drop of their 46-year historical past and wiping out about half a trillion {dollars} in worth this week, as fears that the Iran conflict might cripple Asia’s fourth-largest financial system despatched the received to a 17-year low https://t.co/R17XR8DHmL pic.twitter.com/lNzRyejj21
— Reuters (@Reuters) March 4, 2026
The error highlights a stark distinction in regional institutional competence. Whereas the Financial institution of Japan is rigorously testing blockchain infrastructure for high-level reserve settlements, South Korean tax authorities failed essentially the most fundamental take a look at of digital asset safety: holding the password secret.
The NTS has since apologized and pledged to revise its manuals, however the harm to credibility is completed. Recovering the funds now relies upon fully on police monitoring, a reactive measure for an issue that was proactively created.
Uncover: The perfect meme cash on Solana
Past South Korea: Broader Implications for Crypto Enforcement
South Korea is likely one of the world’s most energetic crypto markets, and its authorities has been aggressive in taxing digital wealth. This incident undermines that authority. It indicators that whereas the state is able to figuring out tax evaders, it lacks the operational maturity to deal with the ensuing seizures securely.
The danger profile for merchants within the area is shifting. Often, the priority is regulatory overreach. When conflict with Iran broke out, Iranian trade outflows jumped 700%. Right here, the danger is totally different: sovereign incompetence. If seizure equals loss, the enforcement mechanism itself turns into a supply of market instability.
As governments worldwide ramp up crypto seizures, the NTS blunder serves as a pricey lesson. Bodily possession means nothing on the blockchain. With out strict digital hygiene, state businesses are simply as weak because the retail traders they goal to manage.
The submit South Korea Tax Service Leaks Seed Phrases, Loses $4.8M in Seized Crypto appeared first on Cryptonews.