Change Of Heart? Hacker Returns $21M Stolen Bitcoin To South Korean Prosecutors

bitcoinistPublished on 2026-02-20Last updated on 2026-02-20

Abstract

A hacker has returned 320.8 Bitcoin (BTC), worth $21 million, to South Korean prosecutors after stealing it in a phishing attack in August. The funds were originally seized during a 2021 illegal gambling investigation and were lost when investigators mistakenly accessed a phishing site. Authorities believe pressure from blocking transactions and requesting cooperation from exchanges led to the return. Despite the recovery, the Gwangju District Prosecutors’ Office pledged to continue investigating to apprehend the perpetrators. This incident, along with another loss of 22 BTC at a Seoul police station, has raised concerns about South Korea’s custody of virtual assets. The country is preparing for the Second Phase of the Virtual Asset User Protection Act to address such vulnerabilities. Recent issues, including a "ghost Bitcoin" error at Bithumb that distributed non-existent assets, have prompted financial authorities to inspect exchanges and consider stronger prosecution measures for crypto crimes.

A hacker has returned 320 Bitcoin (BTC) stolen from South Korean prosecutors throughout a phishing scam last year. As authorities face backlash over repeated incidents, officers have pledged to continue the investigation to uncover the full details and strengthen their custody practices.

Stolen Bitcoin Returned To Gwangju Prosecutors

On Thursday, the Gwangju District Prosecutors’ Office announced it recovered 320.8 Bitcoin lost in August to a phishing attack after the malicious actors willingly sent back the assets earlier this week.

Local news outlet Digital Asset reported on Tuesday that the on-chain data showed the lost BTC, worth $21 million, had been transferred to a wallet managed by South Korean authorities. The assets were seemingly moved through multiple addresses before being transferred to a domestic crypto exchange wallet.

As reported by Bitcoinist, South Korean prosecutors faced backlash last month after discovering that a large stash of seized BTC had gone missing months ago. Authorities reportedly learnt of the loss during a routine check of seized financial assets held as criminal evidence.

After an internal review, prosecutors found that the crypto assets were lost to a scam in August during the handling of the sized assets. Reportedly, malicious actors drained the wallets after investigators mistakenly accessed a phishing website.

Notably, the lost Bitcoin was originally seized during a 2021 investigation into an illegal gambling website. Prosecutors launched an investigation after discovering the incident. They also took measures to recover the assets, including blocking transactions from the perpetrator’s address to domestic exchanges and sending cooperation requests to overseas exchanges.

According to the report, authorities believe that these measures exerted pressure on the hackers, ultimately pushing them to return the funds. Meanwhile, prosecutors are currently continuing to track down the malicious actors while also conducting related investigations and inspections.

“(Regardless of the recovery of the Bitcoin), we will do our utmost to apprehend the perpetrators in the future,” The Gwangju District Prosecutors’ Office stated. “We plan to continue conducting a rigorous investigation to clearly uncover the full details of the case.”

Authorities Slammed Over Repeated Incidents

The Gwangju incident has led to a nationwide review of law enforcement’s handling of virtual assets. The review has revealed another security breach at the Seoul Gangnam Police Station.

Last Friday, the Gangnam station announced it had lost 22 BTC that were voluntarily submitted to authorities during an investigation in November 2021. According to local reports, the leak had not been detected until now, since the investigation into that case had been suspended.

The inspection revealed that the cold wallet storing the Bitcoin was not stolen, but the assets stored inside “had vanished without a trace.” As a response, the Gyeonggi Northern Provincial Police Agency launched a full-scale internal investigation to determine the details of the leak and whether any internal personnel were involved.

The incidents have raised concerns about South Korea’s Bitcoin custody practices, just as the country prepares for the Second Phase of the Virtual Asset User Protection Act, which is expected to serve as a comprehensive framework for the entire industry.

Financial authorities are also conducting an inspection of local exchanges’ internal controls following the “ghost Bitcoin” incident at Bithumb. Earlier this month, the crypto exchange accidentally distributed 620,000 BTC, worth over $40 billion, to 249 users due to an employee’s mistake.

Bithumb’s system failed to block the transaction and distributed assets that did not actually exist, distorting market prices. Lawmakers highlighted that the incident exposed “structural vulnerabilities” in the sector that must be addressed in the upcoming legislation.

The Financial Services Commission (FSC) announced last month that it is studying a proposal for prosecution measures against suspects of crypto asset price manipulation. Some officials argue it’s necessary “to complement the current Virtual Asset User Protection Act by implementing measures for the confiscation of criminal proceeds or the preservation of recovery funds in advance.”

Bitcoin trades at $66,198 in the one-week chart. Source: BTCUSDT on TradingView

Trending Cryptos

Related Questions

QHow much Bitcoin was returned to the Gwangju District Prosecutors' Office by the hacker?

A320.8 BTC, worth $21 million.

QWhat was the original source of the stolen Bitcoin that was returned?

AThe Bitcoin was originally seized during a 2021 investigation into an illegal gambling website.

QWhat action did authorities take that they believe pressured the hackers into returning the funds?

AThey blocked transactions from the perpetrator's address to domestic exchanges and sent cooperation requests to overseas exchanges.

QBesides the Gwangju incident, which other law enforcement agency reported a security breach involving Bitcoin?

AThe Seoul Gangnam Police Station reported losing 22 BTC that were voluntarily submitted during an investigation.

QWhat major event at a South Korean crypto exchange is mentioned as raising concerns about internal controls?

ABithumb accidentally distributed 620,000 'ghost' BTC (worth over $40 billion) to 249 users due to an employee's mistake.

Related Reads

The "Impossible Triad" Is Fundamentally a Pseudo-Problem

The article argues that blockchain's fundamental limitation is not the scalability trilemma (decentralization, scalability, security), which has been largely solved, but the lack of **privacy** and, until recently, clear **legitimacy**. Blockchain is described as a slow, expensive, globally shared computer whose core value is censorship resistance and verifiability. While ideal for native digital assets like money (e.g., stablecoins), its default transparency acts as a **tax**, exposing all transactions and enabling MEV extraction, which deters serious institutional capital. Simultaneously, its permissionless nature created regulatory ambiguity. The piece contends that **privacy** is the missing critical feature. It rejects the false choice between total transparency and complete anonymity. Modern cryptography (like zero-knowledge proofs) enables **compliant privacy**: users can prove facts (solvency, KYC status, compliance) without revealing the underlying sensitive data (specific holdings, identities). This preserves auditability for regulators and eliminates the leak of financial information. With recent regulatory progress (e.g., the GENIUS Act) addressing legitimacy, adding default, provably compliant privacy becomes a pure upgrade. It transforms blockchain from a costly, public ledger into a confidential settlement layer, finally bridging the gap to mainstream institutional and individual adoption of on-chain finance.

链捕手6h ago

The "Impossible Triad" Is Fundamentally a Pseudo-Problem

链捕手6h ago

Optical Chips: Collective Capacity Expansion

The global optical chip industry is experiencing a massive wave of expansion driven by surging AI data center demand. Major players across the US, Japan, Europe, and China are aggressively investing to ramp up production capacity. In the US, Coherent is expanding its 6-inch Indium Phosphide (InP) semiconductor fab in Texas, supported by CHIPS Act funding and a $2 billion strategic investment from NVIDIA. Lumentum is building a new factory for InP optical devices, and Nokia is scaling its advanced photonic chip packaging and testing capabilities. NVIDIA's investments aim to secure future supply of critical lasers and optical interconnect products for AI infrastructure. Japan's JX Advanced Metals, a leading InP substrate supplier, plans a multi-billion yen investment to increase its capacity 7-10 times, strengthening its grip on the crucial upstream materials market. In Europe, IQE and Tower Semiconductor settled a patent dispute and signed a multi-year InP epitaxial wafer supply agreement, highlighting that next-generation silicon photonics platforms will integrate high-performance InP components. STMicroelectronics and Sivers Semiconductors are also expanding silicon photonics production and partnerships. China is rapidly building out its domestic supply chain. Dongshan Precision's subsidiary, Source Photonics, announced a $12 billion project to expand optical chip and module production. Companies like Sanan Optoelectronics and Yunnan Germanium are scaling up InP chip manufacturing and substrate production, moving towards vertical integration from materials to modules. While debate continues around the exact future architecture—whether CPO (Co-Packaged Optics), NPO, or pluggables will dominate—analysts like Morgan Stanley argue the underlying driver is unchangeable: the explosive growth in bandwidth demand. This will inevitably increase the volume of optical engines, lasers, and related content per GPU, regardless of the final technical path. The competition for "more light" in the AI era has intensified into a global, full-chain capacity race.

marsbit8h ago

Optical Chips: Collective Capacity Expansion

marsbit8h ago

Stablecoins Finally Find Real Yield: An In-Depth Look at On-Chain Reinsurance Re | A Conversation with Re Founder Karan Saroya

Stablecoin Real Yield Found: A Deep Dive into On-Chain Reinsurance with Re's Karan Saroya As stablecoin supply exceeds $170 billion, the search for sustainable, non-speculative yield intensifies. Re, an on-chain reinsurance platform, provides an answer: connecting stablecoin capital to the trillion-dollar traditional reinsurance market. Re operates as a regulated reinsurer, accepting stablecoin deposits as collateral to back US insurance companies. These insurers pay premiums, generating yield that flows back to on-chain depositors. Currently supporting 35 insurers and underwriting $500 million, Re projects scaling to over $1 billion soon. Key insights from a Bankless podcast with founder Karan Saroya and investor Avichal of Electric Capital: 1. **Uncorrelated, Real-World Yield:** Re offers stablecoin holders access to reinsurance returns (targeting 12-14%+), an asset class entirely separate from crypto or equity markets. 2. **Operational Efficiency via Smart Contracts:** Re replaces traditional, labor-intensive capital fundraising with smart contracts, allowing a ~12-person team to compete with industry giants. 3. **Regulatory Leverage:** For every $1 of collateral, regulations allow backing $5-7 in written premiums. This leverage amplifies returns from the underlying risk-free rate. 4. **DeFi Integration:** Depositors receive receipt tokens, which can be used in protocols like Morpho for "looping," potentially pushing yields to 18-20%+. 5. **The "DeFi Mullet" Model:** A compliant front-end (regulated reinsurer) paired with a decentralized back-end (smart contracts, DeFi capital markets). 6. **RE Governance Token:** Modeled on Lloyd's of London, the token governs the central capital pool's allocation, counterparty acceptance, and parameters. 7. **Real Economic Impact:** Capital funds real-world productivity (factories, clinics, businesses) via insurance, moving beyond crypto's internal loops. The discussion highlights a pivotal moment: DeFi's supply-side infrastructure is now met by real demand for productive yield, potentially kickstarting a flywheel where vast on-chain stablecoin capital seeks these real-world returns.

链捕手9h ago

Stablecoins Finally Find Real Yield: An In-Depth Look at On-Chain Reinsurance Re | A Conversation with Re Founder Karan Saroya

链捕手9h ago

1996 or 1999? Walsh's First Test is 'How to View AI'

"1996 or 1999? Wall's First Big Test Is 'How to View AI'" Federal Reserve Chairman Wall's initial challenge is not whether to raise or cut rates, but a more fundamental judgment: what kind of boom is the current AI boom? This will determine the Fed's policy path and define his legacy. Economics is split between two opposing views, according to reporter Nick Timiraos. One sees imminent productivity gains that will increase supply and cool inflation, allowing the Fed to hold steady. The other argues that while productivity benefits are distant, demand shocks are here now, and waiting for data confirmation risks missing the intervention window, forcing sharper rate hikes later. Wall has signaled a leaning toward the first view, echoing 1996-era Alan Greenspan, who embraced strong, productivity-driven growth without fear of inflation. However, Wall faces a different macro environment than Greenspan did, with tariff pressures, expanding fiscal deficits, and diminishing globalization benefits, which could force more significant inflation pressures even if AI benefits materialize. Wall's logic, expressed before taking office, is that AI-driven productivity gains won't show in official data for years. If the Fed waits for confirmation, it might mistakenly tighten policy and choke off the very growth that could suppress inflation. This argues for using forward-looking narratives over lagging data. Chicago Fed President Austan Goolsbee presents a key counter-argument. He distinguishes between expected and unexpected productivity booms. A widely anticipated boom, like the current AI wave, can cause people to spend future wealth gains in advance, overheating the economy before productivity actually rises, thus requiring preemptive rate hikes. He cites rising costs for AI data centers as evidence of such overheating. Fed Governor Christopher Waller offers a rebuttal to Goolsbee, noting the "expected spending" mechanism only works if people can borrow against future income, which many households cannot do due to borrowing constraints. Wall also faces a paradox related to his desire to reduce the Fed's use of "forward guidance" (pre-announcing policy moves). This practice was established in 1999 when Greenspan began signaling hikes to avoid market shocks. If the economy follows a less optimistic path, Wall may be forced to choose between using the guidance he wants to abolish or risking market volatility by staying silent. The ultimate question defining Wall's first major test remains: Is this 1996 or 1999?

marsbit11h ago

1996 or 1999? Walsh's First Test is 'How to View AI'

marsbit11h ago

Trading

Spot
Futures

Hot Articles

What is $BITCOIN

DIGITAL GOLD ($BITCOIN): A Comprehensive Analysis Introduction to DIGITAL GOLD ($BITCOIN) DIGITAL GOLD ($BITCOIN) is a blockchain-based project operating on the Solana network, which aims to combine the characteristics of traditional precious metals with the innovation of decentralized technologies. While it shares a name with Bitcoin, often referred to as “digital gold” due to its perception as a store of value, DIGITAL GOLD is a separate token designed to create a unique ecosystem within the Web3 landscape. Its goal is to position itself as a viable alternative digital asset, although specifics regarding its applications and functionalities are still developing. What is DIGITAL GOLD ($BITCOIN)? DIGITAL GOLD ($BITCOIN) is a cryptocurrency token explicitly designed for use on the Solana blockchain. In contrast to Bitcoin, which provides a widely recognized value storage role, this token appears to focus on broader applications and characteristics. Notable aspects include: Blockchain Infrastructure: The token is built on the Solana blockchain, known for its capacity to handle high-speed and low-cost transactions. Supply Dynamics: DIGITAL GOLD has a maximum supply capped at 100 quadrillion tokens (100P $BITCOIN), although details regarding its circulating supply are currently undisclosed. Utility: While precise functionalities are not explicitly outlined, there are indications that the token could be utilized for various applications, potentially involving decentralized applications (dApps) or asset tokenization strategies. Who is the Creator of DIGITAL GOLD ($BITCOIN)? At present, the identity of the creators and development team behind DIGITAL GOLD ($BITCOIN) remains unknown. This situation is typical among many innovative projects within the blockchain space, particularly those aligning with decentralized finance and meme coin phenomena. While such anonymity may foster a community-driven culture, it intensifies concerns about governance and accountability. Who are the Investors of DIGITAL GOLD ($BITCOIN)? The available information indicates that DIGITAL GOLD ($BITCOIN) does not have any known institutional backers or prominent venture capital investments. The project seems to operate on a peer-to-peer model focused on community support and adoption rather than traditional funding routes. Its activity and liquidity are primarily situated on decentralized exchanges (DEXs), such as PumpSwap, rather than established centralized trading platforms, further highlighting its grassroots approach. How DIGITAL GOLD ($BITCOIN) Works The operational mechanics of DIGITAL GOLD ($BITCOIN) can be elaborated on based on its blockchain design and network attributes: Consensus Mechanism: By leveraging Solana’s unique proof-of-history (PoH) combined with a proof-of-stake (PoS) model, the project ensures efficient transaction validation contributing to the network's high performance. Tokenomics: While specific deflationary mechanisms have not been extensively detailed, the vast maximum token supply implies that it may cater to microtransactions or niche use cases that are still to be defined. Interoperability: There exists the potential for integration with Solana’s broader ecosystem, including various decentralized finance (DeFi) platforms. However, the details regarding specific integrations remain unspecified. Timeline of Key Events Here is a timeline that highlights significant milestones concerning DIGITAL GOLD ($BITCOIN): 2023: The initial deployment of the token occurs on the Solana blockchain, marked by its contract address. 2024: DIGITAL GOLD gains visibility as it becomes available for trading on decentralized exchanges like PumpSwap, allowing users to trade it against SOL. 2025: The project witnesses sporadic trading activity and potential interest in community-led engagements, although no noteworthy partnerships or technical advancements have been documented as of yet. Critical Analysis Strengths Scalability: The underlying Solana infrastructure supports high transaction volumes, which could enhance the utility of $BITCOIN in various transaction scenarios. Accessibility: The potential low trading price per token could attract retail investors, facilitating wider participation due to fractional ownership opportunities. Risks Lack of Transparency: The absence of publicly known backers, developers, or an audit process may yield skepticism regarding the project's sustainability and trustworthiness. Market Volatility: The trading activity is heavily reliant on speculative behavior, which can result in significant price volatility and uncertainty for investors. Conclusion DIGITAL GOLD ($BITCOIN) emerges as an intriguing yet ambiguous project within the rapidly evolving Solana ecosystem. While it attempts to leverage the “digital gold” narrative, its departure from Bitcoin's established role as a store of value underscores the need for a clearer differentiation of its intended utility and governance structure. Future acceptance and adoption will likely depend on addressing the current opacity and defining its operational and economic strategies more explicitly. Note: This report encompasses synthesised information available as of October 2023, and developments may have transpired beyond the research period.

406 Total ViewsPublished 2025.05.13Updated 2025.05.13

What is $BITCOIN

Discussions

Welcome to the HTX Community. Here, you can stay informed about the latest platform developments and gain access to professional market insights. Users' opinions on the price of BTC (BTC) are presented below.

活动图片