Tax agency leak triggers $4.8M crypto theft

TLDR

South Koreas tax agency accidentally exposed a seized wallets recovery phrase, letting someone move roughly $4.8 million worth of tokens in a preventable crypto custody failure.

1. The National Tax Service published an unredacted seed phrase in a press release photo, after which 4 million PRTG tokens were quickly transferred out.
2. The tokens represented around 40 percent of PRTGs supply but trade on a thin market, and reporting indicates the funds were later returned with limited realized loss.
3. The incident highlights how even government agencies can mishandle self custody, and it is likely to push tighter rules for how authorities store seized digital assets.

Deep Dive

1. How The Theft Happened

According to multiple local reports summarized by Cointelegraph, South Koreas National Tax Service (NTS) ran a press campaign about seizing assets from tax delinquents and included a photo of Ledger devices plus a handwritten seed phrase that was not blurred in the published materials.

Blockchain watchers then saw an Ethereum address linked to that phrase receive a small amount of ETH for gas, followed by three transactions that emptied 4 million Pre Retogeum (PRTG) tokens, worth about $4.8 million at face value, to another wallet.

Coverage on The Block and a Cointelegraph report describe the sequence as an obvious operational failure, since anyone with the seed phrase effectively controls the wallet.

2. Illiquid Token, Limited Real Damage

Decrypt and Cryptonews note that PRTG is highly illiquid, with very low daily volume on its main venue MEXC, so the nominal $4.8 million figure greatly overstates what could realistically be cashed out in the market.

Those pieces add that the 4 million PRTG represented roughly 40 percent of total supply and that the unknown actor later sent the tokens back to the original wallets, likely after realizing they were practically untradeable at full price.

A local academic quoted in Decrypts coverage argued that the actual economic damage was small but the reputational and procedural damage for authorities was serious.

3. Lessons And What To Watch

Reports highlight this as part of a pattern of public sector mishandling of seized crypto in South Korea, including earlier cases where police lost access to seized Bitcoin by delegating seed control to third parties.

Security specialists quoted in a Cryptonews summary are calling for formal custody standards for government agencies, such as institutional grade multisig, strict photo and media policies, and clearer chain of control for keys.

For individual users, the lesson is straightforward: never store or photograph your recovery phrase in a way that can be captured and shared, and assume that anyone who ever sees it can take full control of your assets.

Conclusion

A single leaked seed phrase in a tax agency press release was enough to trigger an on chain theft of tokens with a headline value of $4.8 million, even though illiquidity limited real losses.

The episode underscores that self custody is powerful but unforgiving, and that governments handling seized crypto must adopt the same or better key management discipline expected of professional custodians and serious retail users.