Tax agency leak drains $4.8M seized crypto

TLDR

South Koreas tax authority accidentally exposed a crypto wallet seed phrase, letting someone briefly drain roughly $4.8 million in seized tokens before they were sent back.

1. South Koreas National Tax Service published a photo showing a wallets seed phrase, enabling an unknown actor to move 4 million PRTG tokens worth about $4.8 million on paper.
2. The stolen tokens were from a highly illiquid asset, so the attacker could not realistically cash out, and the tokens were later returned to the original wallets.
3. The case highlights serious custody weaknesses in how authorities handle seized crypto and increases pressure for dedicated, professional custody setups in future enforcement actions.

Deep Dive

1. How The Leak Happened

In an enforcement press release against tax delinquents, South Koreas National Tax Service (NTS) included a high resolution photo of seized Ledger hardware wallets and a handwritten recovery phrase that was not blurred or masked. Local media and blockchain analysts then traced an Ethereum address controlled by that seed, showing three incoming transfers of Pre Retogeum (PRTG) tokens totaling 4 million, followed by a single outbound transfer of the full balance to another address, consistent with reports that about $4.8 million in seized tokens were taken from the wallet on the basis of the exposed phrase. This operational mistake effectively nullified the protection of the hardware wallets, because anyone with the mnemonic controls the assets inside.

2. Why The Financial Damage Was Limited

The seized asset was Pre Retogeum (PRTG), a niche Ethereum token with very low real trading activity. Reports note that the 4 million tokens represented roughly 40% of total supply and a notional value near $4.8 million, but on chain and exchange data show extremely thin liquidity, with only a small number of holders and transfers and minimal 24 hour volume on its main venue. Analysts therefore concluded the attacker would have struggled to sell any meaningful portion without collapsing the price, and the tokens were subsequently returned to the original wallets, making the actual realized financial loss negligible compared with the headline figure.

3. Broader Custody Risks For Seized Crypto

This is not an isolated problem. South Korean law enforcement has already faced criticism after separate cases where seized Bitcoin went missing due to poor custody procedures and third party wallet arrangements. Together, these incidents highlight that traditional agencies are still building basic playbooks for self custodial assets: who controls seed phrases, how they are stored, and how to avoid human error in public communications. The episode will likely accelerate calls for professional, segregated custody of seized crypto, clearer technical guidelines, and audits of existing holdings held by tax and police agencies.

Conclusion

A publicity photo from South Koreas tax authority briefly turned into a live private key, letting someone move roughly $4.8 million worth of seized PRTG tokens before returning them. The tokens illiquidity kept the real loss small, but the incident underscores how fragile custody can be when seed phrases are mishandled and why governments that increasingly seize digital assets need robust, specialized crypto custody processes.