South Korea’s tax office apologizes for leaking seed phrase to seized crypto
Summary
South Korea's National Tax Service has apologized after accidentally leaking the seed phrase to a stash of seized cryptocurrency. Unknown parties exploited this leak to steal the digital currency, turning a successful bust of tax dodgers into an embarrassment for the agency.
IFF Assessment
FOE
The leak of a seed phrase directly leads to the loss of cryptocurrency, representing a clear win for attackers and a loss for defenders and law enforcement.
Defender Context
This incident highlights the critical importance of secure handling of sensitive credentials like seed phrases, especially when dealing with seized digital assets. Defenders must ensure robust access controls and secure storage mechanisms for cryptocurrency and related keys to prevent similar catastrophic losses.