🔍 Read the full analysis: Binance Hack: US Gets Court Approval To Seize Over $1.2 Billion. Where Is The Rest? on ThorstenMeyerAI.com
Get smart everyday buys delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
The U.S. Justice Department said on November 12 that it had court authorization to seize or restrain more than $1.2 billion in cryptocurrency stolen from Binance. Authorities say more than $2.7 billion has been frozen through government and private-sector efforts, while the remaining assets are still being laundered. The court action does not decide who will ultimately receive recovered funds.
The U.S. Justice Department said on November 12 that it had obtained court authorization to seize or restrain more than $1.2 billion in cryptocurrency stolen from Binance in an October attack. The department attributes the theft to North Korean military members associated with the group the FBI calls TraderTraitor, and says more than $2.7 billion has been frozen through government and private-sector efforts. The orders secure assets while proceedings continue; they do not decide who ultimately owns the money or will be paid.
The Justice Department said the Binance theft occurred on or about October 29 and involved more than $6 billion in virtual assets. That figure is the department’s account of the theft, not an independently detailed accounting in the material released with the announcement. The department said TraderTraitor-linked actors continue to move assets through cryptocurrency bridges, mixers and exchanges.
The department described the recovery figures as minimums: collective U.S. government and private-sector work has frozen more than $2.7 billion, and court authorization covers seizure or restraint of more than $1.2 billion of that amount. A freeze, a court-authorized seizure or restraint, and a final forfeiture are different stages. The release does not say that all frozen assets have been seized, or that the property has been forfeited.
Binance said in an October 30 update that its initial investigation suggested a compromised DevOps engineer’s laptop may have enabled an attacker to access a service container and submit unauthorized withdrawals. The exchange said it had found no evidence of a wallet private-key leak, estimated the impact at around $6.3 billion and said it would cover losses from its SAFU reserve and company funds. Binance also said user funds were safe. Those are the company’s statements; the Justice Department announcement does not provide a separate technical account of the breach.
U.S. moves to secure stolen crypto Recovery does not settle ownership
The Justice Department says court authorization covers more than $1.2 billion tied to the Binance theft. Assets remain in motion, and no final recipient has been identified.
What the figures mean
The department describes the recovery totals as minimums, not a precise accounting of what remains at large.
Frozen assets
More than $2.7 billion has been frozen by government and private-sector efforts.
Seizure or restraint
Authorization covers more than $1.2 billion; it does not mean the assets have been forfeited or returned.
Tracing continues
The DOJ says actors continue moving assets through bridges, mixers and exchanges.
From reported theft to federal action
The two public accounts describe different stages of the response.
What remains unresolved
The announcement leaves key questions open for customers and other potential claimants.
- Authorities attribute the theft to North Korean military members associated with TraderTraitor.
- Binance said it would cover losses from its SAFU reserve and company funds.
- The exact amount still unrecovered and the specific assets covered by the order.
- Who would receive any funds ultimately forfeited, or which legal route applies.
Recovery Does Not Settle Ownership
The court action could make a substantial amount of stolen cryptocurrency harder to move while investigators pursue the case. But securing assets is not the same as returning them. A restraint preserves property during proceedings, while forfeiture is a later legal process that can determine whether the assets are subject to government recovery. The Justice Department’s announcement does not identify a final recipient.
That distinction matters to Binance customers and the exchange. Binance has said it will cover the losses itself, but the federal announcement does not explain whether the exchange, affected users, or another claimant would be eligible for any assets ultimately forfeited. The applicable process and any distribution decision remain unsettled in the information released so far.
The figures also show why recovery remains difficult: the department says more than $2.7 billion has been frozen, but assets moved before they can be locked may be harder to trace and recover. Because the published totals are all stated as “more than” figures, they do not provide a precise accounting of how much remains at large.
Products Worth Considering
Logitech MX Vertical Wireless Ergonomic Mouse
Apple MacBook Air 13.6-inch Laptop with M5 Chip, 16GB Memory, 512GB SSD, Midnight
LG UltraGear 32-Inch QHD 180Hz Curved Gaming Monitor
As an affiliate, we earn on qualifying purchases.
From October Theft to Federal Action
Binance’s first public update came on October 30, one day after the approximate date the Justice Department later gave for the theft. The exchange described its suspected entry route as a potentially compromised employee laptop and unauthorized withdrawal transactions. It said its estimate of the financial impact was around $6.3 billion and that about $3 billion had been frozen on-chain at that point. Those estimates and the suspected method came from Binance, not the later federal court announcement.
On November 12, the Justice Department announced actions addressing North Korean crypto theft and said the Binance-related effort had produced freezes exceeding $2.7 billion. It attributed the theft to North Korean military members and said an FBI Cyber Alert, issued with the U.S. Secret Service and IRS Criminal Investigation, urged crypto services to block transactions involving addresses used by TraderTraitor or assets derived from them.
Federal asset forfeiture can involve criminal, civil judicial or administrative proceedings. The Justice Department describes civil judicial forfeiture as a case against the property itself; a claimant with an interest in the property may seek to establish that interest. The announcement does not identify a court, case number or forfeiture complaint for the Binance assets, so the precise legal path is not specified in the available account.
The release does not give an exact amount of the stolen cryptocurrency that remains beyond reach. Its totals use “more than” qualifiers, and the department says assets continue to move through bridges, mixers and exchanges. The difference between the stated theft estimate and frozen total should not be treated as a precise unrecovered balance.
It is also unclear from the announcement which court authorized the seizure or restraint, what specific assets or addresses are covered, and whether a forfeiture case has been filed. The release does not explain whether the property will be handled through criminal or civil proceedings, or name who would receive funds if forfeiture is completed.
The department attributes the activity to North Korean military members and TraderTraitor, while Binance’s account of the suspected technical route remains an initial company assessment. The material provided does not include a final forensic report or a court finding establishing individual responsibility. Any eventual compensation arrangement between Binance and affected users is likewise not detailed in the federal announcement.
Tracing and Court Proceedings Continue
The Justice Department says investigators and private-sector partners are continuing to trace, freeze, seize and forfeit assets connected to the theft. Crypto platforms have been urged by the FBI alert to block transactions involving identified TraderTraitor addresses and funds derived from them. The department has not announced a deadline for the next update or identified a scheduled court hearing in the material supplied.
Any eventual return of forfeited property would depend on the legal process and claims made by people or entities asserting an interest. The Justice Department says victims may receive forfeited funds through petitions for remission or restoration, but it has not said which route applies to the Binance assets. Customers should rely on official agency and Binance communications: the department’s victim-compensation guidance says legitimate recovery does not require victims to pay a fee, and a demand for an upfront fee is a fraud warning.
Key Questions
The Justice Department said court authorization covers more than $1.2 billion in cryptocurrency connected to the Binance theft. Seizure or restraint does not by itself mean the assets have been forfeited or returned.
How much of the stolen cryptocurrency has been frozen?
The department said government and private-sector efforts had frozen more than $2.7 billion. The figure is a minimum, and it does not establish the exact amount still unrecovered.
Who does the U.S. blame for the Binance hack?
The Justice Department attributes the theft to members of the North Korean military associated with TraderTraitor, the name the FBI uses for the group. The announcement reports the government’s attribution; it does not provide a final court finding of responsibility.
Will Binance customers receive the seized funds?
That has not been determined in the information released. Binance said it would cover losses from its SAFU fund and company funds, while the Justice Department has not identified who would receive any cryptocurrency ultimately forfeited.
Where is the rest of the stolen cryptocurrency?
The Justice Department says TraderTraitor-linked actors are continuing to launder assets through cryptocurrency bridges, mixers and exchanges. It has not disclosed a precise remaining balance or the locations of all assets.
Source: ThorstenMeyerAI.com
