South Korea’s National Tax Service (NTS) has come under fire following a major security lapse that exposed millions in digital assets. In a recent official press release, the agency inadvertently revealed the recovery phrase of a crypto wallet seized during a tax evasion operation. Blockchain data later confirmed that millions of dollars’ worth of digital tokens were rapidly transferred out of the compromised wallet.
Critical Lapse Enables High-Value Transfers
As part of its crackdown on tax delinquents, the NTS published photographs of confiscated hardware wallets belonging to individuals with significant tax debt. However, one of these images accidentally included the uncensored recovery phrase—the crucial set of words that grants full access to a crypto wallet in most blockchain systems.
The fallout was immediate. On-chain records showed that nearly four million Pre Retogeum (PRTG) tokens, valued at around $4.8 million, were moved in several transactions to new addresses soon after the press release surfaced. According to data from Etherscan, a small amount of Ether was first deposited into the wallet to pay transaction fees. The entire token balance was then drained over three separate transactions.
Blockchain Forensics Highlight Agency Vulnerability
Blockchain analytics companies quickly noted that the transfers took place moments after the NTS press release went public. The transaction pattern made it evident that only someone with knowledge of the recovery phrase could have initiated the moves.
Security experts have long warned against storing recovery phrases digitally or photographing them, as such methods leave assets wide open to theft. The fact that this incident occurred via an official government communication has raised urgent questions about the adequacy of crypto asset safeguarding protocols in public institutions.
Government Procedures Under Scrutiny
At the core of the scandal is the operational risk public agencies face when handling digital asset seizures. With cryptocurrencies increasingly confiscated in the course of tax and criminal investigations, secure storage of private keys and recovery phrases has become a critical infrastructure challenge for authorities.
So far, the National Tax Service has issued no comment as to whether the stolen tokens might be recovered or if additional losses are anticipated.
Meanwhile, South Korea is ramping up its oversight of online investment promotions. Under newly introduced regulations, individuals and influencers who produce content related to digital assets or stock markets will have to declare any financial interests or partnerships to the public.
“This event spotlights the urgent need for government agencies to adopt stringent measures to protect digital assets under their control,” security specialists cautioned, drawing attention to the risks that stem from even a momentary lapse in established procedures.
As the global rise of digital assets challenges conventional frameworks, the incident has underscored the importance of accountability and robust risk management in the public sector. Many are calling for a comprehensive audit of current crypto custody practices, and demanding swift reform to prevent similar incidents.
