🔍 Read the full analysis: Binance Hack: How The US Won Approval To Seize Over $1.2 Billion on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
The U.S. Justice Department said on November 12 that it had obtained court authorization to seize or restrain more than $1.2 billion in cryptocurrency stolen from Binance. The department attributes the October 29 theft to North Korean military-linked actors called TraderTraitor and says more than $2.7 billion has been frozen through government and private-sector efforts. The court action does not determine who will ultimately receive the funds.
The U.S. Justice Department said November 12 that it had obtained court authorization to seize or restrain more than $1.2 billion in cryptocurrency stolen from Binance in an October 29 hack. The department attributes the theft to North Korean military members identified by the FBI as TraderTraitor, but the orders do not amount to a final forfeiture or decide who will receive recovered funds.
The Justice Department said government agencies and private-sector partners have frozen more than $2.7 billion connected to the theft so far. Of that amount, the department has obtained court authorization to seize or restrain more than $1.2 billion. These are official minimum figures, not a complete accounting of the stolen funds or a precise measure of what remains unrecovered.
The department said TraderTraitor actors continue to move assets through cryptocurrency bridges, mixers and exchanges. An FBI Cyber Alert, issued with the U.S. Secret Service and IRS Criminal Investigation, urged cryptocurrency services to block transactions involving addresses used by the group to launder the stolen assets. The agencies say tracing, freezing and pursuing the funds remain ongoing.
Binance said in an October 30 security update that its initial investigation suggested a compromised DevOps engineer’s laptop may have enabled an attacker to access a service container and submit unauthorized withdrawal transactions, as detailed in its hack post-mortem. The exchange said it had found no evidence of a wallet private-key leak. Binance estimated the impact at about $6.3 billion, said roughly $3 billion had been frozen on-chain at that point, and said it would cover losses from its SAFU reserve and company funds. It told customers that user funds were safe.
U.S. Secures Court Approval for Binance Hack Assets
The Justice Department says it can seize or restrain more than $1.2 billion in cryptocurrency tied to the theft. The legal action secures assets while questions of ownership and repayment remain open.
What the court action means
Securing assets is a step in the recovery process, not a decision about who owns them.
- Assets can be restrained while proceedings continue.
- Investigators are tracing cryptocurrency movements.
- No final forfeiture has been announced.
- Who may claim or receive funds is undecided.
From breach to federal action
The case moved from Binance’s initial security report to a government effort to trace and secure the stolen assets.
How the breach may have happened
Binance described its initial assessment; the source material does not report a completed technical investigation.
Binance said an engineer’s laptop may have been compromised.
The laptop may have enabled access to a service container.
Binance said unauthorized withdrawal transactions followed; it reported no evidence of a wallet private-key leak.
What happens next
Investigators and service providers are working to trace assets that may still be moving.
- Crypto services are urged to block transactions tied to TraderTraitor addresses.
- Further court filings could clarify the assets and proceedings involved.
- Any return of forfeited funds would require a later process to determine eligible claimants.
A Court Order Is Not a Payout
The announcement marks a major asset-recovery step in a theft that Binance estimated at about $6.3 billion. A freeze can prevent assets from being moved, and a seizure or restraint secures property while legal proceedings continue. Neither action by itself establishes final ownership or means that victims can immediately claim the funds.
That distinction matters to Binance customers and to the exchange, which has said it will cover losses itself. It remains unresolved whether Binance, individual users or another party would be recognized as a claimant to any assets that are ultimately forfeited. The Justice Department says forfeited money can be returned through victim-compensation processes, but it has not announced a distribution plan for this case.
People affected by the incident should also be alert to recovery scams. The source material notes that U.S. victim-compensation rules do not require victims to pay a fee to recover forfeited money; a request for an advance fee is a warning sign of fraud.
Products Worth Considering

Bose QuietComfort Wireless Noise-Cancelling Headphones, White Smoke

Jackery Solar Generator 1000 v2 with Two 100W Solar Panels, 1024Wh LiFePO4 Battery

Kindle Paperwhite Signature Edition 32GB E-Reader, 7-Inch Display, Seaglass Green
As an affiliate, we earn on qualifying purchases.
From Binance’s Breach to Federal Action
Binance disclosed the security incident on October 30, saying its initial inquiry pointed to possible compromise of an engineer’s laptop and unauthorized withdrawal transactions. The company reported that some assets had already been frozen and said it would cover the losses. The Justice Department’s November 12 announcement concerns the subsequent effort to trace and secure stolen cryptocurrency.
The department’s language is narrower than a statement that the government has recovered or permanently taken ownership of the money: it says it obtained authorization to “seize or restrain” more than $1.2 billion. Under the Justice Department’s description of federal asset-forfeiture procedures, forfeiture is a separate legal step. In civil judicial forfeiture, the government seeks a court decision that property is connected to criminal activity, and people who claim an interest may take part in the proceeding.
The November 12 release, as described in the source material, did not name a court or case number and did not identify a forfeiture complaint. The Justice Department also announced a separate action involving FaceStealer, but the available source details do not provide enough information to describe that matter further.
Ownership and Recovery Still Unresolved
The Justice Department’s figures are all stated as “more than” amounts, so they do not allow an exact calculation of how much was stolen, frozen, restrained or remains out of reach. The department says laundering is continuing, but the source material does not provide a detailed breakdown of the assets’ current locations or the amount that has been permanently recovered.
The available announcement does not identify the court, case number or a forfeiture filing. It also does not say whether Binance or individual users would be treated as claimants, or how any forfeited assets would be allocated. Binance’s commitment to cover losses is separate from any eventual court decision about ownership of the cryptocurrency.
The department attributes the theft to North Korean military members associated with TraderTraitor. The information provided does not include an independently adjudicated finding on that attribution or additional evidence explaining how investigators reached it. Binance’s description of a possible laptop compromise is likewise an initial assessment; the source material does not give a completed technical investigation.
Tracing and Forfeiture Proceedings
The Justice Department says work to trace, freeze, seize and forfeit the assets is ongoing. Cryptocurrency platforms and other service providers are being asked to block transactions tied to addresses associated with TraderTraitor, while investigators attempt to follow assets that have moved across services and networks.
Further court filings or department announcements could clarify which assets are covered by the orders, where proceedings are taking place and whether a forfeiture case has been initiated. Any decision to return forfeited funds would require a later process to determine who may claim them. The source material gives no timetable for those steps or for a final distribution.
Key Questions
What did the Justice Department obtain?
The department said it obtained court authorization to seize or restrain more than $1.2 billion in cryptocurrency linked to the Binance theft. That is not the same as a final forfeiture.
How much of the stolen cryptocurrency has been frozen?
The Justice Department said government and private-sector efforts had frozen more than $2.7 billion. The source does not give an exact total for what remains unrecovered, and the official figures are minimums.
Who does the United States blame for the Binance hack?
The Justice Department attributes the theft to members of the North Korean military associated with the group the FBI calls TraderTraitor. That is the department’s stated attribution.
Will Binance users receive the seized money?
That has not been decided. Seizure or restraint secures assets during legal proceedings; a later forfeiture and victim-compensation process would be needed to determine ownership and any distribution. Binance has separately said it will cover losses from its own funds and SAFU reserve.
How did Binance say the breach may have happened?
In its October 30 update, Binance said its initial investigation suggested a compromised DevOps engineer’s laptop may have allowed access to a service container and unauthorized withdrawal transactions. The exchange said it had found no evidence of a wallet private-key leak.
Source: ThorstenMeyerAI.com
