Internal audit showed the coins were likely lost via a phishing attack during official storage, according to local media reports.