Korea\u2019s CBDC trial went ahead after largely internal security checks, with reportedly no evidence of an independent post-test review.<\/p>\n
South Korea<\/a>\u2019s central bank ran its first live central bank digital currency (CBDC<\/a>) pilot without a regulatory security inspection or an independent post-test audit, according to a report<\/a> from Maeil Business Newspaper, a South Korean business daily.<\/p>\n From April to June 2025, the central bank implemented the first live phase of Project Hangang, which is based on an integrated wholesale CBDC platform that incorporates bank-issued deposit tokens.<\/p>\n But the Financial Supervisory Service, which is the financial watchdog for the South Korea banks, conducted no separate security inspection throughout the three-month pilot, according to the report, citing documents provided by the regulator to the country lawmaker Lee Heon-seung from the ruling People Power Party.<\/p>\n Read also: Crypto in Asia: Why South Korea Is Doubling Down on the Crypto Market in 2026<\/a><\/p>\n Instead, the project relied on a pre-launch security review and vulnerability checks by the Financial Security Institute, a banking-sector cybersecurity body, SK Shieldus, a Korean security company, and internal teams at Woori Bank and NongHyup Bank, two participating lenders.<\/p>\n That structure meant some of the institutions being tested were also helping assess themselves, while the documents reportedly showed no independent security audit after customers began making real transactions.<\/p>\n Self-Assessed Security, Wider Pilot<\/p>\n The Bank of Korea later acknowledged public concerns that deposit tokens could be vulnerable to cyberattacks. Still, it dismissed them in its own pilot report, arguing that the system had undergone a thorough security review before launch.<\/p>\n But that assurance came from the institution running the experiment rather than an independent third party. The central bank told the newspaper that its pre-launch checks were strong enough, adding that the process followed the Financial Supervisory Service\u2019s procedures.<\/p>\n