South Korea Probes Theft of Seized Bitcoin Worth $48M in Suspected Phishing Heist

South Korean prosecutors are investigating the disappearance of a significant amount of Bitcoin that had been confiscated as criminal proceeds, after an internal audit suggested the assets may have vanished while under state custody.

The Gwangju District Prosecutors’ Office believes the loss likely occurred during the management period last year and is treating the incident as a suspected phishing attack, raising fresh concerns over how seized digital assets are stored and safeguarded.

According to a senior prosecution source cited by local media, preliminary internal assessments suggest the missing Bitcoin was worth roughly 70 billion won, or about $48 million, at the time of the loss.

Seized Bitcoin Lost After Wallet Password Exposure, Officials Say

An official at the prosecutor’s office stated that the investigators are striving to establish the locations of the seized properties, but they could not verify any additional information at the moment.

Local news states that the bitcoin was linked to an illegal gambling situation and that it was being seized as an illegal piece of property when it was lost.

The estimates reported in the domestic media indicate that the value might be in tens of billions of won, which would translate to several million dollars, but those numbers have not been verified by prosecutors.

The early evidence indicates that the bitcoin was stored in a portable USB, as opposed to a more durable custody system.

The wallet password was also reported to have been revealed to a third party during a regular examination of confiscated items, which provided an opportunity to illegally access it and transfer money.

🚨 @KoinlyOfficial warns a third-party breach may have exposed user emails but stresses that no wallet, transaction, tax, or portfolio data was shared with Mixpanel.#CryptoSecurity #CryptoTax #Koinlyhttps://t.co/ASDxMchfyg

— Cryptonews.com (@cryptonews) December 23, 2025

The case is one of the most recent high-profile cases of stolen cryptocurrency being re-stolen by law enforcement via social engineering instead of technical merits.

Phishing attacks are deceptive, not technical, as they take advantage of a trusting party. In a more institutionalized environment, they usually prosper through human error and poor internal controls as opposed to blockchain weaknesses.

South Korea’s Expanding Authority Over Seized Digital Assets

The Gwangju District Prosecutors’ Office is no stranger to large crypto seizure cases. In March 2024, it pursued the recovery of roughly 170 billion won, or about $127 million at the time, in Bitcoin linked to another illegal gambling operation.

The seizure of digital assets has been gradually institutionalized in South Korea in recent years after several landmark Supreme Court decisions made it clear that cryptocurrencies can be regulated as property under the Criminal Procedure Act.

🇰🇷 South Korea's Supreme Court rules Bitcoin on exchanges can be legally seized under Criminal Procedure Act, establishing precedent as regulators expand asset freeze powers and AML enforcement.#SouthKorea #Bitcoinhttps://t.co/3fa5PxHMMG

— Cryptonews.com (@cryptonews) January 9, 2026

Such a legal basis was initially established in 2018, when the Supreme Court decided that cryptocurrencies are intangible assets and have economic value and thus can be seized in case they are linked to a crime.

Later judicial decisions have further broadened the power of the seizure, and a December case verified that the bitcoin kept on domestic exchanges like Upbit and Bithumb may also be confiscated.

The recent case arrived on the day when the South Korean regulators are busy increasing control over the crypto industry.

In January, financial regulators announced an intention to test a payment freeze system whereby investigators can temporarily freeze crypto-related accounts before the suspected illicit funds are taken off or deposited in an offshore account.