South Korea Sells 320.8 BTC for $21.5M After Phishing Recovery
Gwangju prosecutors liquidated 320.8 bitcoin between February 24-March 6, 2026, after recovering assets lost to a phishing attack that compromised government wallet security in August 2025.
- 01South Korean prosecutors completed the liquidation of 320.8 BTC on March 6, 2026, netting $21.5 million for the national treasury
- 02The assets had been missing for five months (August 2025 to February 2026) before recovery during exchange freeze operations
- 03The sale was executed in small batches over an 11-day window (February 24 - March 6, 2026) to minimize market impact
- 04New virtual asset management guidelines were issued February 23, 2026, mandating public keys only for balance checks
What Happened
The Gwangju District Prosecutors' Office completed the sale of 320.8 BTC for approximately 31.6 billion won ($21.5 million) between February 24 and March 6, 2026 The Block, 2026-03-10. Bitcoin is trading at $71,171 as of March 10, 2026, with a 24-hour change of +3.44% Market Data, 2026-03-10.
- The liquidation occurred over an 11-day window, with proceeds transferred directly to South Korea's national treasury Chosun Ilbo, 2026-03-10.
The bitcoin was originally seized in 2021 from an international illegal gambling operation that functioned between 2018 and 2021 Chosun Ilbo, 2026-03-10. The assets went missing in August 2025 after a prosecution official entered the wallet's recovery mnemonic into a phishing website during what was described as a routine audit Crypto News, 2026-02-13.
Background
The stolen funds remained missing for approximately five months before being unexpectedly returned to a government-controlled wallet on February 17, 2026 Cryptopolitan, 2026-02-19. Authorities achieved recovery after requesting domestic and international exchanges to freeze the hacker's addresses, effectively blocking liquidation channels.
- The theft was discovered during a routine audit, with assets missing from August 2025 until recovery in February 2026.
Following the incident, the Supreme Prosecutors' Office issued new virtual asset management guidelines on February 23, 2026, mandating the use of public keys only for balance checks and prohibiting mnemonic phrase entry into any web interface Chosun Ilbo, 2026-02-23.
The Bull Case
The Gwangju District Prosecutors' Office stated that the successful recovery and liquidation demonstrates the effectiveness of the government's 'intervention strategy' in blocking liquidation channels for hackers Bloomingbit, 2026-03-10.
Bloomingbit Analysis noted that the sale of 320 BTC was absorbed by the market without significant downward pressure, indicating strong 'smart money' defense and market maturity as of March 2026 Bloomingbit, 2026-03-10.
- The 320.8 BTC sale concluded four days prior to the March 10, 2026 reporting date with minimal market impact.
The Bear Case
Hwang Seok-jin, Professor at Dongguk University, characterized the incident as a 'preventable security failure' caused by basic carelessness, comparing the exposure of a mnemonic phrase to leaving a bank vault open Chosun Ilbo, 2026-03-10.
Cho Jae-woo, Professor at Hansung University, stated the lapse highlights an 'insufficient understanding' of digital asset management within public institutions, which has led to multiple custody failures across South Korean agencies The Block, 2026-03-10.
- New government guidelines now prohibit mnemonic phrase entry into web interfaces following the August 2025 security breach.
What to Watch
Market participants should monitor whether additional seized bitcoin from South Korean government holdings enters liquidation channels in Q2 2026. The Supreme Prosecutors' Office guidelines issued February 23, 2026 will be tested as other agencies manage recovered digital assets Chosun Ilbo, 2026-02-23.
Key metrics to track include:
- Additional government bitcoin sales announced by Korean authorities
- Implementation timeline for new custody protocols across prosecution offices
- Market absorption capacity for institutional-sized bitcoin liquidations
Sources
- The Block - South Korean prosecutors sell $21.5 million in seized bitcoin once lost to phishing attack (2026-03-10)
- Chosun Ilbo - Gwangju Prosecutors Liquidate 320 Recovered Bitcoins for 31.6 Billion Won (2026-03-10)
- Bloomingbit - Prosecutors dispose of all 320 recovered bitcoins (2026-03-10)