Hacker Changes Heart, Returns $21M Bitcoin to South Korean Prosecutors, Hunt Continues

Thursday, 19/02/2026 | 13:24 GMT by Tareq Sikder
  • Authorities requested local exchanges to freeze the hacker’s wallet to prevent liquidation.
  • Crypto theft totaled $3.4 billion in 2025, with North Korea-linked actors responsible for $2 billion.
A series of South Korean flag

South Korean prosecutors said they recovered 320.88 Bitcoin this week after the cryptocurrency was returned to an official wallet. At the time of writing, the coins were worth about $21.3 million, according to The Chosun Daily.

320 Bitcoin Recovered, Suspect Still Sought

The Gwangju District Prosecutors’ Office said the Bitcoin, stolen in August 2025, was discovered missing during a routine inspection on Jan. 23. Authorities attributed the theft to a phishing attack after access credentials were exposed.

The returned funds were later moved to a secure domestic exchange wallet. Prosecutors requested local exchanges to freeze the hacker’s wallet, limiting the ability to liquidate the assets, but did not provide a reason for the return.

“We will do our best to arrest the suspect regardless of the recovery of the bitcoin,” the office told Digital Asset Works.

Seoul Police Lose 22 Bitcoin, Probe Continues

The recovery follows a separate incident in Seoul, where 22 Bitcoin, worth about $1.5 million, vanished from police custody. The coins had been voluntarily submitted in November 2021 and were transferred externally, though the cold wallet itself was not stolen. The Gyeonggi Northern Provincial Police Agency is investigating the missing 22 Bitcoin .

High-Value Hacks Dominate Crypto Theft Trends

Crypto theft reached $3.4 billion in 2025, driven largely by a few high-value breaches, according to Chainalysis. North Korea-linked actors were responsible for at least $2 billion in stolen cryptocurrency.

While large exchange and custodial hacks accounted for most losses, thefts from individual wallets also rose, affecting tens of thousands of users.

The report highlighted evolving attack methods, including social engineering and impersonation, and noted that a small number of incidents continued to drive the majority of stolen funds. Analysts say these trends underscore persistent security risks across the crypto ecosystem.

South Korean prosecutors said they recovered 320.88 Bitcoin this week after the cryptocurrency was returned to an official wallet. At the time of writing, the coins were worth about $21.3 million, according to The Chosun Daily.

320 Bitcoin Recovered, Suspect Still Sought

The Gwangju District Prosecutors’ Office said the Bitcoin, stolen in August 2025, was discovered missing during a routine inspection on Jan. 23. Authorities attributed the theft to a phishing attack after access credentials were exposed.

The returned funds were later moved to a secure domestic exchange wallet. Prosecutors requested local exchanges to freeze the hacker’s wallet, limiting the ability to liquidate the assets, but did not provide a reason for the return.

“We will do our best to arrest the suspect regardless of the recovery of the bitcoin,” the office told Digital Asset Works.

Seoul Police Lose 22 Bitcoin, Probe Continues

The recovery follows a separate incident in Seoul, where 22 Bitcoin, worth about $1.5 million, vanished from police custody. The coins had been voluntarily submitted in November 2021 and were transferred externally, though the cold wallet itself was not stolen. The Gyeonggi Northern Provincial Police Agency is investigating the missing 22 Bitcoin .

High-Value Hacks Dominate Crypto Theft Trends

Crypto theft reached $3.4 billion in 2025, driven largely by a few high-value breaches, according to Chainalysis. North Korea-linked actors were responsible for at least $2 billion in stolen cryptocurrency.

While large exchange and custodial hacks accounted for most losses, thefts from individual wallets also rose, affecting tens of thousands of users.

The report highlighted evolving attack methods, including social engineering and impersonation, and noted that a small number of incidents continued to drive the majority of stolen funds. Analysts say these trends underscore persistent security risks across the crypto ecosystem.

About the Author: Tareq Sikder
Tareq Sikder
  • 2149 Articles
  • 39 Followers
About the Author: Tareq Sikder
A Forex technical analyst and writer who has been engaged in financial writing for 12 years.
  • 2149 Articles
  • 39 Followers

More from the Author

Trending

!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|} !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}