South Korean Government Leak Crypto Wallet Seed Phrases — $5 Million Disappears
In a significant cybersecurity blunder, South Korean tax officials inadvertently exposed the seed phrases for cryptocurrency wallets belonging to a tax evasion suspect, resulting in the theft of up to $5 million worth of cryptocurrency. The incident has triggered widespread concern about governmental handling of digital assets and prompted investigations by law enforcement agencies.
How the Breach Occurred
On February 26, the National Tax Service (NTS) of South Korea released a press statement intended to highlight its successes in tackling tax evasion among cryptocurrency holders. As part of their campaign, the NTS published a photograph showing hand-written notes. Unbeknownst to officials, this image contained uncensored seed phrases — crucial 12 to 24 word combinations used to restore access to crypto wallets.
A hacker quickly exploited the mistake, using the exposed seed phrases to access and drain the wallets linked to the suspected tax evaders. The NTS acknowledged the leak but downplayed the scale of the loss, stating the actual value of the lost Pre-Retogeum coins, a relatively small-cap altcoin involved in the case, was “far less” than the initially reported $5 million figure.
Experts Weigh In
Cho Jae-woo, director of Hansung University’s Blockchain Research Institute, criticized the tax authorities’ mishandling, saying, “The tax authorities have displayed a basic lack of understanding of how cryptocurrencies work.” Analysts speculate that a “white hat hacker” — someone who breaches security systems to reveal vulnerabilities without malicious intent — may have been behind the seizure of the funds, possibly intending to draw attention to the government’s security flaws before returning the assets.
Broader Context and Previous Incidents
This recent breach adds to a troubling trend for South Korean officials. Earlier this year, both police and prosecutors lost millions in cryptocurrency, including a separate incident in which police lost $1.4 million worth of Bitcoin only days after prosecutors temporarily misplaced assets valued at $20 million. These ongoing security lapses underscore systemic vulnerabilities in managing digital currency within law enforcement and regulatory bodies.
Official Response and Next Steps
Following the leak, the NTS issued a statement on March 1, expressing regret and apologizing for the incident. They described the publication of the photo as “careless” and vowed to cooperate fully with police and other authorities in efforts to recover the stolen cryptoassets.
Deputy Prime Minister and Minister of Strategy and Finance Koo Yoon-chul emphasized the need for urgent reforms, stating the government and financial regulators would review the handling and management of digital assets confiscated from tax evaders. He pledged to “quickly establish and implement measures to prevent a recurrence” of such security failures.
Continued Investigation
Authorities are actively pursuing the recovery of the lost Pre-Retogeum coins and investigating the breach’s full ramifications. The case has heightened calls within South Korea for improved cryptocurrency security protocols and greater awareness among officials managing digital assets.
As governments worldwide increase their involvement in crypto tax enforcement and asset recovery, the South Korean incident serves as a cautionary tale about the risks of inadequate digital security measures.
Tim Alper is a News Correspondent at DL News. For tips, email [email protected].