Investigators are zeroing in on access logs showing the transfer originated from an internal IP, pointing to possible insider complicity or a phishing-style breach, though no suspects have been named yet.

Broader picture: South Korea holds over 1,000 BTC in seized assets nationwide (per recent gov’t disclosures), so this could trigger even tighter regs on cold storage protocols. Fingers crossed they recover it!