The South Korean central bank's digital currency pilot has been criticized for lacking external independent security verification

According to South Korean media Maeil Business, data from the Financial Supervisory Service of Korea shows that during the first phase of the CBDC pilot project led by the Bank of Korea, financial authorities did not conduct any independent security verification, and only the participating banks conducted their own pre-security reviews.

Before the project launched, only an IT vulnerability self-assessment was conducted for the participating banks, executed by the Financial Security Institute, SK Shields, and self-inspection teams from Woori Bank and NongHyup Bank, forming an evaluation model of "self-check by the regulated entities." The central bank acknowledged external doubts about the security of the deposit tokens in the pilot result report and responded that the pre-review was sufficient, but critics pointed out that this explanation was a self-assessment and not an independent third-party verification.