Key Takeaways
- In February 2026, South Korea’s National Tax Service accidentally exposed sensitive crypto wallet details, including a seed phrase.
- The exposure led to the theft of approximately $4.8 million in PRTG tokens soon after being made public.
- Authorities quickly removed the press release and launched an investigation into the incident’s impact on seized cryptocurrency.
- Regulators are now reviewing custody practices for confiscated assets to prevent future breaches.
- Blockchain analysts continue to monitor the stolen funds’ movement, which may be hard to convert due to low liquidity.
The South Korea crypto seed phrase leak began when the National Tax Service (NTS) accidentally exposed sensitive wallet details in a public release. This happened in February 2026 during a report on tax enforcement actions. As part of the announcement, the agency shared images of seized cryptocurrency assets. However, one of those images clearly showed a full wallet recovery phrase, completely visible and unprotected.
A seed phrase is essentially the master key to a crypto wallet. Anyone who has it can restore the wallet and move the funds. No password or extra verification is needed once the phrase is exposed.
How the Seed Phrase Exposure Led to Asset Loss
Following the South Korea crypto seed phrase leak, members of the crypto community quickly located the wallet on the blockchain. It held around 4 million PRTG tokens, valued at roughly $4.8 million at the time.
Not long after the information became public, activity on the wallet began. An unknown party gained access and first added a small amount of Ethereum to cover transaction fees. Soon after, the entire token balance was transferred out to another address.
All of this happened within hours of the leak. The wallet was completely emptied. Blockchain records later confirmed that the exposed recovery phrase had been used to carry out the transactions.
Government Response to the Crypto Security Incident
Once the mistake was discovered, authorities quickly took down the original press release. An investigation was launched to track where the stolen funds went. At the same time, officials started reviewing how confiscated crypto assets are handled and stored.
This incident was part of a broader crackdown on tax evasion. The NTS had been targeting over 100 individuals, with seized digital assets included in the operation.
Regulators are now reassessing custody practices for seized cryptocurrency. Multiple oversight agencies are involved in the review, aiming to prevent similar breaches in the future.
The stolen tokens are tied to a low-liquidity asset, which could make them harder to convert into cash. Meanwhile, blockchain analysts continue to monitor the movement of the funds.
Source: https://cointelegraph.com/news/south-korea-tax-agency-private-crypto-custody-seed-phrase-leak
