TLDR
- South Korean prosecutors have lost $48 million in Bitcoin after a suspected phishing attack.
- The loss occurred after officials accessed a scam website during a routine inspection.
- Investigators are still looking into the whereabouts of the missing Bitcoin.
- The incident raises concerns about digital asset security protocols used by law enforcement.
The Gwangju District Prosecutors’ Office in South Korea is facing scrutiny after discovering a significant loss of Bitcoin that had been seized during a criminal investigation. This loss, which is suspected to have occurred around mid-2025, is believed to be the result of a phishing attack.
Officials accidentally accessed a scam website while inspecting the seized assets. The authorities have yet to confirm the exact amount of Bitcoin lost, but internal estimates suggest the figure could be as high as 70 billion won, or approximately $48 million.
The incident has prompted questions about how law enforcement agencies handle and secure digital assets, particularly in the growing field of cryptocurrency investigations. As cryptocurrency continues to be involved in criminal cases, ensuring secure custody of seized assets has become a significant concern for authorities worldwide.
Suspected Phishing Attack and Bitcoin Loss
The loss was discovered during a routine check of the seized Bitcoin, which was stored in custody as part of an ongoing criminal investigation. During this inspection, prosecutors reportedly accessed a phishing website, leading to the potential exposure of critical private keys. Private keys are the essential components needed to access and transfer Bitcoin from one wallet to another, and any breach could result in the theft of the cryptocurrency.
Authorities have not yet disclosed the full details of how the phishing attack occurred or how the funds were taken, but investigations are ongoing to track the circumstances surrounding the loss. A spokesperson from the prosecutors’ office confirmed that they are working to find out the whereabouts of the lost assets and the reason behind the incident.
Questions Raised About Digital Asset Custody
This case has raised concerns regarding the procedures used by law enforcement when handling cryptocurrency. The primary issue is whether proper custody protocols were followed during the seizure of the Bitcoin. If the prosecutors only seized a USB device containing wallet information but did not transfer the Bitcoin to a secure wallet, the original owners could have accessed the funds. This scenario could explain the disappearance of the cryptocurrency.
Security practices surrounding digital assets are more complex than those used for traditional evidence, like physical property. Experts in digital asset security note that cryptocurrency should be stored in air-gapped wallets, meaning the wallets are created in environments that are completely disconnected from the internet. This ensures the safety of the private keys, which should not be exposed to potential cyber threats.
Broader Concerns About Cryptocurrency Security
This loss highlights the challenges faced by law enforcement agencies when dealing with digital currencies. Unlike traditional evidence, such as physical documents or objects, cryptocurrency requires advanced security measures to protect it from theft or unauthorized access. Regular cybersecurity threats, including phishing, hacking, and malware, have become more sophisticated, and the risk to law enforcement agencies handling digital assets is significant.
The prosecutors’ office has not revealed whether they followed proper custody guidelines or what specific measures were in place to secure the Bitcoin. The incident may indicate broader vulnerabilities in how digital assets are managed by authorities. For now, the case serves as a warning to other institutions that handling cryptocurrency requires thorough preparation and awareness of the evolving digital landscape.
In the wake of this loss, it remains unclear whether the prosecutors will revise their digital asset protocols or implement stricter security measures. Authorities have yet to confirm any updates to their procedures or whether this incident will lead to changes in how cryptocurrency is handled in future investigations.





