South Korea’s Seized Bitcoin Vanishes in Major Phishing Heist – Prosecutors Probe $300M Loss

The prosecutors of South Korea are looking into the loss of a substantial sum of Bitcoin, which had been confiscated as criminal funds following an internal audit showing that the funds may have disappeared during the time in the custody of the state.

The case, believed by authorities to be a phishing attack, is now coming to raise new questions over the storage and security of confiscated digital assets, as the nation continues to extend its legal and regulatory jurisdiction over crypto markets.

A report released by the Yonhap News on Thursday said that the Gwangju District Prosecutors’ Office recently verified that a substantial amount of Bitcoin that was acquired during a previous criminal case is no longer recorded.

Prosecutors suspect that the loss had taken place in the middle of last year, when it was stored and managed.

Phishing has been cited as the most likely cause, though officials declined to disclose the exact amount missing or its current valuation, citing the ongoing probe.

Seized Bitcoin Lost After Wallet Password Exposure, Officials Say

An official at the prosecutor’s office stated that the investigators are striving to establish the locations of the seized properties, but they could not verify any additional information at the moment.

Local news states that the bitcoin was linked to an illegal gambling situation and that it was being seized as an illegal piece of property when it was lost.

The estimates reported in the domestic media indicate that the value might be in tens of billions of won, which would translate to several million dollars, but those numbers have not been verified by prosecutors.

The early evidence indicates that the bitcoin was stored in a portable USB, as opposed to a more durable custody system.

The wallet password was also reported to have been revealed to a third party during a regular examination of confiscated items, which provided an opportunity to illegally access it and transfer money.

The case is one of the most recent high-profile cases of stolen cryptocurrency being re-stolen by law enforcement via social engineering instead of technical merits.

Phishing attacks are deceptive, not technical, as they take advantage of a trusting party. In a more institutionalized environment, they usually prosper through human error and poor internal controls as opposed to blockchain weaknesses.

South Korea’s Expanding Authority Over Seized Digital Assets

The Gwangju District Prosecutors’ Office is no stranger to large crypto seizure cases. In March 2024, it pursued the recovery of roughly 170 billion won, or about $127 million at the time, in Bitcoin linked to another illegal gambling operation.

The seizure of digital assets has been gradually institutionalized in South Korea in recent years after several landmark Supreme Court decisions made it clear that cryptocurrencies can be regulated as property under the Criminal Procedure Act.

Such a legal basis was initially established in 2018, when the Supreme Court decided that cryptocurrencies are intangible assets and have economic value and thus can be seized in case they are linked to a crime.

Later judicial decisions have further broadened the power of the seizure, and a December case verified that the bitcoin kept on domestic exchanges like Upbit and Bithumb may also be confiscated.

The recent case arrived on the day when the South Korean regulators are busy increasing control over the crypto industry.

In January, financial regulators announced an intention to test a payment freeze system whereby investigators can temporarily freeze crypto-related accounts before the suspected illicit funds are taken off or deposited in an offshore account.