The Nationwide Tax Service (NTS) of South Korea turned a routine enforcement victory right into a historic operational failure this week, leaking personal keys in a press launch that resulted within the theft of $4.8 million in seized property.
The company revealed unredacted high-resolution images of {hardware} wallets containing a visual seed phrase leak, permitting opportunistic on-chain actors to empty 4 million PRTG Tokens remotely.
It was a preventable disaster. As a substitute of securing the crypto seizure in new government-controlled wallets, authorities displayed the unique restoration codes to the general public eye. The funds have been gone inside hours.
Key Takeaways:
- The Leak: The NTS revealed press images that includes legible handwritten notes containing the 24-word restoration phrases for seized Ledger wallets.
- The Loss: Thieves drained roughly 4 million PRTG tokens, valued at roughly $4.8 million (6.9 billion KRW), utilizing the uncovered codes.
- The Failure: The incident exposes a essential hole in Institutional Custody protocols, as brokers didn’t switch property to safe storage earlier than publicity.
Uncover: One of the best crypto to diversify your portfolio with
How The Nationwide Tax Service of South Korea Misplaced $5 Million in Crypto in Hours
On February 26, the Nationwide Tax Service issued a press launch saying the seizure of 8.1 billion KRW ($5.5 million in the present day) from high-net-worth tax evaders.
Hilarious.
South Korea’s Nationwide Tax Service revealed their current confiscation of stolen crypto by exhibiting a photograph of the seed phrase they retrieved.
$4.8 million was instantly drained. pic.twitter.com/cKyYBq60Jn— Terence Michael (@ProofOfMoney) March 2, 2026
As an example the motion, the company included images of the bodily property, together with a Ledger {hardware} pockets. Beside the system lay a handwritten word containing the whole mnemonic restoration phrase, the grasp key that grants full entry to the funds no matter who holds the bodily system.
The picture was excessive sufficient decision that the phrases have been legible. For anybody with a fundamental understanding of crypto self-custody, the photograph was equal to posting a checking account quantity and PIN on a billboard.
In line with Gizmodo and native experiences, the theft occurred in two waves. A primary actor drained the pockets however, maybe fearing the implications of stealing from the federal government, returned the funds shortly after.
A second thief was much less scrupulous. Roughly 2.5 hours later, this second actor transferred the restored funds out completely.
Police are actually investigating, however the blockchain’s immutability makes retrieval troublesome with out the thief’s cooperation.
The Scale of the Loss
The monetary injury is substantial, although market realities might blunt the thief’s precise payday.
The pockets contained 4 million PRTG (Pre-Retogeum) tokens, with a nominal worth of roughly $4.8 million or 6.9 billion KRW. On-chain knowledge reveals the attacker funded the pockets with a small quantity of ETH to cowl fuel charges earlier than executing three speedy outbound transactions.
Whereas the paper loss is sort of $5 million, liquidity for PRTG is skinny. Dumping that quantity on open markets would probably crash the worth, that means the realizable worth for the hacker is considerably decrease.
Nonetheless, for the NTS, the loss is absolute; credit that have been meant to fulfill tax money owed have been wiped from the treasury’s steadiness sheet.
Institutional Custody: What Went Mistaken
This was not a technical hack. It was a failure of process. Institutional custody requires extra than simply seizing a bodily system; it mandates the fast switch of digital property to a safe, government-controlled setting.
Leaving funds in a suspect’s authentic pockets after which photographing the restoration phrase betrays a elementary misunderstanding of how digital bearer property work.
South Korean shares sank 12%, posting the largest drop of their 46-year historical past and wiping out about half a trillion {dollars} in worth this week, as fears that the Iran conflict may cripple Asia’s fourth-largest economic system despatched the received to a 17-year low https://t.co/R17XR8DHmL pic.twitter.com/lNzRyejj21
— Reuters (@Reuters) March 4, 2026
The error highlights a stark distinction in regional institutional competence. Whereas the Financial institution of Japan is rigorously testing blockchain infrastructure for high-level reserve settlements, South Korean tax authorities failed essentially the most fundamental take a look at of digital asset safety: maintaining the password secret.
The NTS has since apologized and pledged to revise its manuals, however the injury to credibility is completed. Recovering the funds now relies upon fully on police monitoring, a reactive measure for an issue that was proactively created.
Uncover: One of the best meme cash on Solana
Past South Korea: Broader Implications for Crypto Enforcement
South Korea is likely one of the world’s most energetic crypto markets, and its authorities has been aggressive in taxing digital wealth. This incident undermines that authority. It alerts that whereas the state is able to figuring out tax evaders, it lacks the operational maturity to deal with the ensuing seizures securely.
The chance profile for merchants within the area is shifting. Often, the priority is regulatory overreach. When conflict with Iran broke out, Iranian alternate outflows jumped 700%. Right here, the danger is completely different: sovereign incompetence. If seizure equals loss, the enforcement mechanism itself turns into a supply of market instability.
As governments worldwide ramp up crypto seizures, the NTS blunder serves as a pricey lesson. Bodily possession means nothing on the blockchain. With out strict digital hygiene, state companies are simply as weak because the retail buyers they intention to manage.
The submit South Korea Tax Service Leaks Seed Phrases, Loses $4.8M in Seized Crypto appeared first on Cryptonews.