South Korea Sells $21.5M in Recovered Bitcoin After Custody Breach

In South Korea, authorities have recovered and liquidated a tranche of cryptocurrency seized in a phishing-linked custody incident, while prosecutors signal a broader shift in how crypto losses are treated in debt-restructuring cases. The Gwangju District Prosecutors’ Office disclosed that 320.8 Bitcoin were sold at prevailing market prices, yielding roughly 31.59 billion won (about $21.5 million) that was transferred to the national treasury. The sale was staged over an 11-day window in late February and early March to minimize market impact, according to local coverage. The episode follows a complex chain of events that began with a custody breach and culminated in a government-controlled wallet and subsequent liquidation.

Key takeaways

• Authorities sold 320.8 Bitcoin at market prices, transferring about 31.59 billion won to the state treasury.


• The liquidation occurred over 11 days, from Feb. 24 to March 6, to limit potential market disruption.


• The Bitcoin was originally seized from a suspect tied to an illegal gambling operation that allegedly handled roughly 390 billion won in wagers between 2018 and 2021.


• Bitcoin had been lost during a custody handover in August 2025 after a phishing scheme compromised asset managers, with funds traced to a hacker’s wallet.


• On Feb. 17, the assets were moved to a government-controlled wallet after exchanges were asked to freeze the address; on Feb. 19, prosecutors reported the hacker had returned 320.88 BTC.


• Separately, courts in Daegu, Daejeon and Gwangju are reevaluating how crypto losses are treated in personal rehabilitation, potentially excluding crypto losses from liquidation value calculations.

Tickers mentioned: $BTC

Sentiment: Neutral

Price impact: Neutral. The staged sale aimed to minimize market disruption by spreading liquidations over more than a week.

Market context: The case underscores how authorities manage liquidations of crypto assets recovered from criminal activity and how regulators are weighing crypto losses within broader debt-restructuring frameworks, reflecting a maturing approach to crypto custody and asset recovery in a tightening regulatory environment.

Why it matters

The events illuminate how public authorities handle crypto assets recovered through law enforcement. By selling the seized Bitcoin in measured, market-aware batches, the prosecutors sought to avoid abrupt price movements that could ripple through exchanges and related markets. The proceeds, funneled into the national treasury, also demonstrate a tangible channel through which illicit activity—now partly deterred by stricter controls—contributes to public financing. The episode illustrates both the challenges of asset tracing in the wake of phishing scams and the practical steps governments are taking to re-integrate recovered funds into legitimate channels.

Beyond the immediate liquidation, the incident feeds into a broader discussion about how crypto losses are treated in personal debt restructurings. Local outlets reported that newly established rehabilitation courts in three cities are moving toward guidelines that would generally exclude crypto investment losses from liquidation calculations. In effect, losses tied to cryptocurrency investments could be treated more like ordinary asset losses rather than speculative debts, potentially reducing repayment obligations for individuals entering court-supervised debt relief. The shift would align crypto losses with other non-liquid assets in some rehabilitation scenarios, signaling a nuanced stance as courts adapt to digital assets in financial distress cases.

The broader regulatory and judicial response matters because it shapes risk and recovery dynamics for investors, creditors, and service providers operating in Korea’s crypto ecosystem. The February and March developments show that authorities are increasingly capable of tracing and recovering stolen or misappropriated crypto, and they are prepared to take decisive steps—such as freezing exchange addresses and coordinating with overseas partners—to facilitate recovery and orderly liquidations when possible.

What to watch next

• Follow-up guidelines from rehabilitation courts in Daejeon, Daegu, and Gwangju detailing how crypto losses are treated in liquidation calculations, with potential implementation timelines.


• Any additional recoveries or reversals related to the phishing incident, including further tracing of the hacker’s wallet or subsequent asset movements.


• Regulatory clarifications on how crypto assets are valued in debt restructurings and how this may affect individuals undergoing rehabilitation in Korea.


• Further actions by prosecutors or financial authorities to coordinate with exchanges or international partners in asset freezes or return processes.

Sources & verification

• Gwangju District Prosecutors’ Office statements and reported sale details (local coverage via Chosun Ilbo English edition).


• BTC sale details and the related transfer amount to the national treasury as reported by The Chosun Ilbo.


• Reports on the custody breach and the phishing incident that led to the loss and subsequent recovery of Bitcoin (linked in coverage of the case).


• EToday’s report on rehabilitation courts and proposed guidelines for crypto-loss treatment in debt restructuring cases.

What the article topic means for readers

South Korea’s handling of recovered crypto assets demonstrates a practical approach to asset recovery and governance, highlighting how authorities balance market stability with the need to return funds to public coffers. The development also reflects a broader trend: as crypto markets mature and regulatory scrutiny intensifies, legal frameworks are increasingly capable of integrating digital assets into traditional financial processes, from custody management to debt resolution. For investors and builders, the episode underscores the importance of robust custody controls, vigilant monitoring of phishing risks, and a clear, evolving set of rules that can affect how crypto holdings are valued during legal proceedings.

What to watch next

• Expected publication of rehabilitation guidelines in the three cities and any formal adoption timelines.


• Updates on any additional recoveries or legal actions tied to the phishing incident or the illegal gambling operation.


• Regulatory clarifications on crypto asset valuation in debt restructurings and potential implications for individual borrowers.

Sources & verification

• Chosun Ilbo English coverage on the 320.8 BTC sale and the 31.59 billion won transfer.


• Official statements from the Gwangju District Prosecutors’ Office regarding the timing and rationale of the sale.


• EToday reporting on rehabilitation courts’ evolving treatment of crypto losses in debt restructuring.

Market reaction and key details

Bitcoin (CRYPTO: BTC) movements in this case illustrate how public institutions are integrating digital assets into traditional financial operations. The phased sale approach aimed to minimize market impact while generating visible state revenue from assets formerly tied to criminal activity. The broader takeaway is a signal that regulatory and judicial ecosystems are adapting to the realities of crypto custody, theft, and recovery, with potential downstream effects on liquidity, investor sentiment, and the design of future enforcement actions.

https://www.cryptobreaking.com/south-korea-sells-21-5m/?utm_source=blogger%20&utm_medium=social_auto&utm_campaign=South%20Korea%20Sells%20$21.5M%20in%20Recovered%20Bitcoin%20After%20Custody%20Breach%20