February 20, 2026

at

10:05 am

EST

(Updated:

)

MIN READ

South Korea Recovers $21 Million BTC From Hacker - Track On Arkham

South Korean prosecutors have recovered $21 million worth of bitcoin that was stolen from their custody last year. Here’s how to track it with Arkham
No items found.
Arkham Intelligence logo white
Finn Grant
Arkham
Article
Guides
News
Insights
Reports
Trading

Contents

    The Gwangju District Prosecutors’ Office has recovered 320.88 lost BTC, with the assets being returned to the prosecution’s wallet on the evening of the 17th. (View the transaction hash for this transfer here.

    The BTC was stolen from the agency last year and, according to the agency, was returned voluntarily. The agency cited efforts to block attempts to move bitcoin from the criminal wallet to local exchanges, as well as requests for cooperation sent to overseas platforms, as the reason for the return.

    This BTC, worth $21 million, was successfully reclaimed following a "secret return" by the thieves rather than a physical arrest.

    The recovery process began when on-chain data showed the 320.88 BTC transferred back to a wallet where the prosecutors controlled the keys.

    The BTC then passed through several wallets before arriving in an Upbit cold wallet. It was the South Korean authorities who transferred the BTC to Upbit as it was perceived to be safer than self-custody. 

    There are several wallets involved in this chain of custody. They are listed below in order of transfer of the 320.88 BTC: 

    View the flow of funds here. 

    To trace the funds from the first address to the Upbit cold wallet in one intuitive dashboard, sign up to Arkham and use the Arkham Tracer

    According to South Korean news outlets, the prosecution believes the return was triggered by freeze requests on domestic exchanges. These measures blocked the thieves’ ability to cash out, effectively forcing the return of the stolen funds.

    The success of the recovery has caused legal and financial experts to pay attention to on-chain enforcement. For a deep-dive into blockchain intelligence, read our guide here

    As more assets move across the blockchain, keeping track of their movement through several wallets will be a key metric for investigators and analysts.

    The Arkham Intel Platform also provides powerful tools for monitoring the wallets of government entities and exchanges.

    Finn Grant

    Finn is a writer, formerly of The Daily Telegraph and New Scientist magazine. Prior to his career in journalism, he founded a successful blogging agency. He has been an active participant in crypto markets since 2020. In his spare time, Finn writes sci-fi - see his X profile for more: @0xdjinnplant.

    Arkham Intelligence logo white
    Arkham
    The Arkham Research Team comprises analysts and engineers who worked at Tesla, Meta, and Apple, alongside alumni from the University of Cambridge, Imperial College London, UC Berkeley, and other institutions.
    No items found.
    Information provided herein is for general educational purposes only and is not intended to constitute investment or other advice on financial products. Such information is not, and should not be read as, an offer or recommendation to buy or sell or a solicitation of an offer or recommendation to buy or sell any particular digital asset or to use any particular investment strategy. Arkham makes no representations as to the accuracy, completeness, timeliness, suitability, or validity of any information on this website and will not be liable for any errors, omissions, or delays in this information or any losses, injuries, or damages arising from its display or use. Digital assets, including stablecoins and NFTs, are subject to market volatility, involve a high degree of risk, can lose value, and can even become worthless; additionally, digital assets are not covered by insurance against potential losses and are not subject to FDIC or SIPC protections. Historical returns are not indicative of future returns.