AIThis post was created with the assistance of artificial intelligence (AI).

🔍 Read the full analysis: Binance Hack: How The US Won Approval To Seize Over $1.2 Billion on ThorstenMeyerAI.com

Before you orderOffer from Amazon

Get the latest gadgets delivered free with Prime

  • Fast, free delivery on millions of items
  • Prime Video, Amazon Music and more included
  • Member-only deals all year
Start your free Prime trial Free trial for eligible customers · Cancel anytime
As an affiliate, we earn on qualifying purchases.

TL;DR

The U.S. Justice Department said on November 12 that it had obtained court authorization to seize or restrain more than $1.2 billion in cryptocurrency stolen from Binance. The department attributes the October 29 theft to North Korean military-linked actors called TraderTraitor and says more than $2.7 billion has been frozen through government and private-sector efforts. The court action does not determine who will ultimately receive the funds.

The U.S. Justice Department said November 12 that it had obtained court authorization to seize or restrain more than $1.2 billion in cryptocurrency stolen from Binance in an October 29 hack. The department attributes the theft to North Korean military members identified by the FBI as TraderTraitor, but the orders do not amount to a final forfeiture or decide who will receive recovered funds.

The Justice Department said government agencies and private-sector partners have frozen more than $2.7 billion connected to the theft so far. Of that amount, the department has obtained court authorization to seize or restrain more than $1.2 billion. These are official minimum figures, not a complete accounting of the stolen funds or a precise measure of what remains unrecovered.

The department said TraderTraitor actors continue to move assets through cryptocurrency bridges, mixers and exchanges. An FBI Cyber Alert, issued with the U.S. Secret Service and IRS Criminal Investigation, urged cryptocurrency services to block transactions involving addresses used by the group to launder the stolen assets. The agencies say tracing, freezing and pursuing the funds remain ongoing.

Binance said in an October 30 security update that its initial investigation suggested a compromised DevOps engineer’s laptop may have enabled an attacker to access a service container and submit unauthorized withdrawal transactions, as detailed in its hack post-mortem. The exchange said it had found no evidence of a wallet private-key leak. Binance estimated the impact at about $6.3 billion, said roughly $3 billion had been frozen on-chain at that point, and said it would cover losses from its SAFU reserve and company funds. It told customers that user funds were safe.

At a glance
updateWhen: Announced November 12, 2026; investigat…
The developmentThe Justice Department announced court authorization to seize or restrain more than $1.2 billion of cryptocurrency stolen from Binance.
Binance Hack · Briefing

U.S. Secures Court Approval for Binance Hack Assets

The Justice Department says it can seize or restrain more than $1.2 billion in cryptocurrency tied to the theft. The legal action secures assets while questions of ownership and repayment remain open.

$1.2B+
authorized for seizure or restraint
$2.7B+
frozen through public and private efforts
$6.3B
Binance’s estimated impact

What the court action means

Securing assets is a step in the recovery process, not a decision about who owns them.

Now
  • Assets can be restrained while proceedings continue.
  • Investigators are tracing cryptocurrency movements.
Still unresolved
  • No final forfeiture has been announced.
  • Who may claim or receive funds is undecided.

From breach to federal action

The case moved from Binance’s initial security report to a government effort to trace and secure the stolen assets.

October 29
The theft took place, according to the Justice Department.
October 30
Binance reported a possible compromised engineer laptop and unauthorized withdrawals.
November 12
The Justice Department announced court authorization to seize or restrain assets.

How the breach may have happened

Binance described its initial assessment; the source material does not report a completed technical investigation.

1
Possible laptop compromise

Binance said an engineer’s laptop may have been compromised.

2
Service container access

The laptop may have enabled access to a service container.

3
Unauthorized withdrawals

Binance said unauthorized withdrawal transactions followed; it reported no evidence of a wallet private-key leak.

What happens next

Investigators and service providers are working to trace assets that may still be moving.

  • Crypto services are urged to block transactions tied to TraderTraitor addresses.
  • Further court filings could clarify the assets and proceedings involved.
  • Any return of forfeited funds would require a later process to determine eligible claimants.
Watch for scamsVictim-compensation rules do not require an advance fee to recover forfeited money. A request for upfront payment is a warning sign.
The takeaway
The court authorization is a major step toward securing assets, but it does not mean Binance users can claim the money now.

A Court Order Is Not a Payout

The announcement marks a major asset-recovery step in a theft that Binance estimated at about $6.3 billion. A freeze can prevent assets from being moved, and a seizure or restraint secures property while legal proceedings continue. Neither action by itself establishes final ownership or means that victims can immediately claim the funds.

That distinction matters to Binance customers and to the exchange, which has said it will cover losses itself. It remains unresolved whether Binance, individual users or another party would be recognized as a claimant to any assets that are ultimately forfeited. The Justice Department says forfeited money can be returned through victim-compensation processes, but it has not announced a distribution plan for this case.

People affected by the incident should also be alert to recovery scams. The source material notes that U.S. victim-compensation rules do not require victims to pay a fee to recover forfeited money; a request for an advance fee is a warning sign of fraud.

Products Worth Considering

Bose QuietComfort Wireless Noise-Cancelling Headphones, White Smoke

Bose QuietComfort Wireless Noise-Cancelling Headphones, White Smoke

Jackery Solar Generator 1000 v2 with Two 100W Solar Panels, 1024Wh LiFePO4 Battery

Jackery Solar Generator 1000 v2 with Two 100W Solar Panels, 1024Wh LiFePO4 Battery

Kindle Paperwhite Signature Edition 32GB E-Reader, 7-Inch Display, Seaglass Green

Kindle Paperwhite Signature Edition 32GB E-Reader, 7-Inch Display, Seaglass Green

As an affiliate, we earn on qualifying purchases.

From Binance’s Breach to Federal Action

Binance disclosed the security incident on October 30, saying its initial inquiry pointed to possible compromise of an engineer’s laptop and unauthorized withdrawal transactions. The company reported that some assets had already been frozen and said it would cover the losses. The Justice Department’s November 12 announcement concerns the subsequent effort to trace and secure stolen cryptocurrency.

The department’s language is narrower than a statement that the government has recovered or permanently taken ownership of the money: it says it obtained authorization to “seize or restrain” more than $1.2 billion. Under the Justice Department’s description of federal asset-forfeiture procedures, forfeiture is a separate legal step. In civil judicial forfeiture, the government seeks a court decision that property is connected to criminal activity, and people who claim an interest may take part in the proceeding.

The November 12 release, as described in the source material, did not name a court or case number and did not identify a forfeiture complaint. The Justice Department also announced a separate action involving FaceStealer, but the available source details do not provide enough information to describe that matter further.

Ownership and Recovery Still Unresolved

The Justice Department’s figures are all stated as “more than” amounts, so they do not allow an exact calculation of how much was stolen, frozen, restrained or remains out of reach. The department says laundering is continuing, but the source material does not provide a detailed breakdown of the assets’ current locations or the amount that has been permanently recovered.

The available announcement does not identify the court, case number or a forfeiture filing. It also does not say whether Binance or individual users would be treated as claimants, or how any forfeited assets would be allocated. Binance’s commitment to cover losses is separate from any eventual court decision about ownership of the cryptocurrency.

The department attributes the theft to North Korean military members associated with TraderTraitor. The information provided does not include an independently adjudicated finding on that attribution or additional evidence explaining how investigators reached it. Binance’s description of a possible laptop compromise is likewise an initial assessment; the source material does not give a completed technical investigation.

Tracing and Forfeiture Proceedings

The Justice Department says work to trace, freeze, seize and forfeit the assets is ongoing. Cryptocurrency platforms and other service providers are being asked to block transactions tied to addresses associated with TraderTraitor, while investigators attempt to follow assets that have moved across services and networks.

Further court filings or department announcements could clarify which assets are covered by the orders, where proceedings are taking place and whether a forfeiture case has been initiated. Any decision to return forfeited funds would require a later process to determine who may claim them. The source material gives no timetable for those steps or for a final distribution.

Key Questions

What did the Justice Department obtain?

The department said it obtained court authorization to seize or restrain more than $1.2 billion in cryptocurrency linked to the Binance theft. That is not the same as a final forfeiture.

How much of the stolen cryptocurrency has been frozen?

The Justice Department said government and private-sector efforts had frozen more than $2.7 billion. The source does not give an exact total for what remains unrecovered, and the official figures are minimums.

Who does the United States blame for the Binance hack?

The Justice Department attributes the theft to members of the North Korean military associated with the group the FBI calls TraderTraitor. That is the department’s stated attribution.

Will Binance users receive the seized money?

That has not been decided. Seizure or restraint secures assets during legal proceedings; a later forfeiture and victim-compensation process would be needed to determine ownership and any distribution. Binance has separately said it will cover losses from its own funds and SAFU reserve.

How did Binance say the breach may have happened?

In its October 30 update, Binance said its initial investigation suggested a compromised DevOps engineer’s laptop may have allowed access to a service container and unauthorized withdrawal transactions. The exchange said it had found no evidence of a wallet private-key leak.

Source: ThorstenMeyerAI.com

You May Also Like

Traders Are Letting xAI’s Grok Bot Run Unsupervised, And It Already Lost Money – Startup Fortune

A Startup Fortune headline says traders let Grok trade unsupervised and lose money, but the available material provides no figures or verification.

The bank account in the chat. How personal finance became an agentic on-ramp.

OpenAI launched a preview of personal finance features in ChatGPT, enabling bank account connections for Pro users, signaling a shift toward agentic finance interfaces.

Week Four — A viral “100x trade” strategy, tested 13,000 times. It loses.

Thorsten Meyer AI says a paper-money test of a viral Polymarket trading strategy lost money across about 13,000 windows.

Clawdmeter turns your Claude Code usage stats into a tiny desktop dashboard

Clawdmeter is an open source hardware project that displays Claude Code usage stats via a tiny, customizable desktop dashboard, blending fun with productivity.