The South Korean National Tax Service is embroiled in controversy following severe security oversights that resulted in the disappearance of digital assets worth millions of dollars. The agency inadvertently disclosed a critical recovery key for a crypto wallet, which was intended to seize digital currency from tax evaders, to the public. Consequently, two separate incidents led to the theft of 4 million PRTG tokens, reviving concerns about public institutions’ ability to safely manage digital currencies.
How Did the PRTG Tokens Get Stolen?
The issue exploded during a February 26 press event when the National Tax Service aimed to spotlight its crackdown on elite tax dodgers. However, they unintentionally revealed the 24-word recovery phrase essential for accessing a cold wallet holding crypto assets. This critical mistake made the wallet’s contents vulnerable to anyone with the information.
In the aftermath, blockchain investigations and police findings suggested that someone promptly used the exposed details on February 27 to transfer all PRTG tokens to their own crypto account. The individual claimed to media outlets that accessing the tokens was surprisingly straightforward due to the leaked phrase.
Could the Second Breach Have Been Prevented?
Yes. The same individual who took the tokens later returned them to the tax agency’s wallet. However, the taxpayers’ funds were re-stolen within two hours by another party exploiting the disclosed recovery phrase. This subsequent theft underscored the critical vulnerabilities within the National Tax Service’s security protocols.
Security experts lambasted the agency for not securing the recovered assets in a new wallet, thereby leaving them open to further attacks. The agency maintained that no additional administrative failures occurred during the second incident.
Specific points of intrigue include:
- 4 million PRTG tokens stolen in rapid succession.
- Failure to secure sensitive recovery keys resulting in criminal opportunity.
- Public mistrust over the tax agency’s handling of digital assets.
On March 1, the tax agency issued a formal apology, accepting full responsibility. They acknowledged mishandling wallet photos and announced plans for an independent security review, committing to enhance their pre-publication checks.
“This incident was entirely the fault of the National Tax Service.”
A police inquiry has been triggered to locate which media outlets accessed high-res images and to track down who might have secured the wallet keys. This incident follows other governmental blunders involving cryptocurrencies, raising alarms about administrative weaknesses in managing digital assets. Financial specialists advise urgent improvements in technical and security infrastructure to keep pace with the ascending use of digital currencies in illegal financial activities.
