South Korea’s Tax Authority Moves Toward Private Custody After $4.8 Million Crypto Leak
Seoul – March 20, 2026 – The National Tax Service (NTS) of South Korea announced that it is drafting a plan to outsource the custody of seized digital‑asset holdings to a private‑sector provider. The decision follows a high‑profile security breach in February that exposed a wallet recovery phrase and allowed thieves to transfer roughly $4.8 million worth of cryptocurrency from a government‑controlled Ledger device.
Background
On 26 February the NTS issued a press release that unintentionally included a clear photograph of a cold‑wallet ledger and a sheet of paper displaying the 12‑word mnemonic seed phrase used to access the device. Because the seed was not redacted, malicious actors were able to move the confiscated tokens to external addresses.
The incident added to a string of custodial mishaps involving Korean authorities, most notably a case last year in which the Gangnam police precinct lost 22 BTC seized from a criminal investigation. The two failures prompted Deputy Prime Minister and Finance Minister Koo Yun‑cheol to launch a cross‑agency probe on 1 March, examining how government bodies manage digital‑asset seizures.
The Custody Procurement Plan
According to sources familiar with the NTS’s internal deliberations, the agency is now preparing a set of selection criteria for a private‑custody partner. The procurement process is expected to be concluded in the first half of 2026, with the following factors slated for evaluation:
- Security Architecture – Multi‑layer encryption, hardware‑security‑module (HSM) usage, and audit‑ready key‑management processes.
- Corporate Scale – Ability to handle large, multi‑jurisdictional asset pools without operational bottlenecks.
- Regulatory Coverage – Whether the firm holds insurance or a licence under South Korea’s Virtual Asset User Protection Act (VAUPA), which mandates safeguards for user funds on virtual‑asset service providers (VASPs).
A newly created task force, dedicated to the development of a digital‑asset management framework, will oversee the selection. The group is also tasked with drafting comprehensive operational manuals that cover the full lifecycle of seized assets—from acquisition and secure storage to eventual liquidation—and with rolling out staff‑training programs to mitigate future human‑error risks.
Analysis
The NTS’s pivot toward private custodians reflects a broader trend among governments that are grappling with the unique challenges of digital‑asset forensics. While public agencies possess the authority to seize crypto, they often lack the specialized infrastructure and risk‑management expertise required to protect those assets at scale.
- Reduced Operational Risk – Entrusting custody to firms that already meet stringent VAUPA requirements could lower the likelihood of accidental exposure or internal theft.
- Regulatory Alignment – By selecting a provider that is already licensed under VAUPA, the NTS can harmonize its seizure‑handling procedures with existing consumer‑protection statutes, simplifying compliance audits.
- Potential Cost Implications – Private custodians typically charge fees based on assets under management. These costs may be passed onto the state budget or, depending on future legislation, onto the parties whose assets are being liquidated.
- Impact on Tax Collection – Secure custody is critical for the enforcement of South Korea’s planned 22 percent crypto‑transaction tax. Any further mishandling could fuel political opposition, which is already advocating for the tax’s repeal.
The move also signals a willingness to centralize crypto‑related functions within the NTS. Currently, responsibilities are dispersed across several departments, a fragmentation that contributed to the February leak. A dedicated division, as envisaged by the task force, would streamline decision‑making and provide clearer accountability.
Key Takeaways
- Security breach: A leaked seed phrase in a February press release allowed the unauthorized transfer of about $4.8 million in seized crypto.
- Policy response: The NTS is preparing to hire a private custodian, with a target selection deadline in H1 2026.
- Selection criteria: Emphasis will be placed on security technology, company size, and compliance with the Virtual Asset User Protection Act.
- Organizational reforms: A task force will draft custody‑related SOPs, conduct staff training, and set up a dedicated crypto division within the tax agency.
- Regulatory context: The initiative follows a cross‑agency investigation launched by Deputy Prime Minister Koo Yun‑cheol after multiple custody failures, including a police loss of 22 BTC.
- Broader implications: Strengthening custody may bolster confidence in the upcoming 22 % crypto tax, but it also raises questions about cost, oversight, and the future of state‑managed digital assets.
The information in this article is based on statements from the National Tax Service, reports from ZDNet Korea, and public disclosures made by South Korean government officials. As always, readers are encouraged to verify details independently.
Source: https://cointelegraph.com/news/south-korea-tax-agency-private-crypto-custody-seed-phrase-leak?utm_source=rss_feed&utm_medium=feed&utm_campaign=rss_partner_inbound
