South Korea Suffers Loss of $48 Million in Seized Bitcoin Due to Phishing Attack

South Korean prosecutors are currently investigating the loss of approximately $48 million in confiscated Bitcoin, believed to be linked to a phishing attack, as reported by local media sources.

Key Takeaways

About $48 million worth of seized Bitcoin has gone missing in South Korea due to a suspected phishing attack.
The loss was uncovered during a routine inspection by the Gwangju District Prosecutors’ Office.
The exposure of sensitive login information is thought to have occurred through a fraudulent website.
Authorities are scrutinizing internal security measures and determining how the breach happened.
This incident raises broader concerns about the security of seized cryptocurrency held by law enforcement globally.

South Korea loses seized Bitcoin in phishing attack

Investigation of Missing Cryptocurrency

According to reports, the Gwangju District Prosecutors’ Office found the missing digital currency during a standard inspection of confiscated financial assets related to a prior criminal case. The reported value of the missing Bitcoin is around 70 billion won or $48 million.

Officials became aware of the loss while conducting routine internal checks, which are intended to ensure that seized assets remain secure. Following this discovery, an internal review was initiated, but the prosecutors' office refrained from providing further information, citing the ongoing investigation.

Details Emerged About the Phishing Incident

“We are conducting an investigation to determine the circumstances and location of the seized assets,” a prosecution official stated to Yonhap News. This official indicated that they could not confirm specific details at this stage. The exact date when the Bitcoin was originally seized has not been publicly shared.

Local news outlets reported that the Bitcoin may have been compromised when a password was inadvertently revealed outside the agency. Investigators suspect that this exposure occurred when an employee accessed a counterfeit website that mimicked a legitimate service, potentially capturing sensitive login details.

An official from the prosecutors' office has reportedly confirmed that phishing is the likely cause of the incident, saying it followed access to the fraudulent site. As a result, authorities are reviewing their internal security protocols and employee access controls.

Reviewing Security Procedures

The investigation is focused on uncovering how the credentials were compromised and whether there were any deficiencies in the internal controls. Additionally, officials are exploring options for potentially recovering the lost assets.

This case highlights the challenges faced by law enforcement agencies worldwide that manage significant amounts of seized cryptocurrency, often held for long periods while legal matters are resolved. The methods for custody of these digital assets are frequently not disclosed to the public.

In the United States, past reports indicate that the Secret Service seized $225 million in cryptocurrency with assistance from Coinbase. Meanwhile, in the United Kingdom, discussions have arisen regarding the retention of billions in seized Bitcoin rather than returning it to victims.

As of now, authorities have not provided a timeline for when the investigation might conclude.