🔍 Read the full analysis: Binance Hack: US Court Approves A Seizure Worth Over $1.2 Billion on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
The Justice Department said on Nov. 12 that it obtained court authorization to seize or restrain more than $1.2 billion in cryptocurrency stolen from Binance. The department attributes the theft to North Korean military members and says more than $2.7 billion has been frozen through government and private-sector efforts. The order does not amount to final forfeiture or determine who will receive recovered funds.
The U.S. Justice Department said on November 12 that it had obtained court authorization to seize or restrain more than $1.2 billion in cryptocurrency stolen from Binance, a major step in efforts to recover funds from the exchange’s October hack. The department attributes the theft to members of the North Korean military, whom the FBI identifies as the group TraderTraitor; the court action secures assets but does not decide who ultimately owns or will receive them.
The department said government and private-sector efforts had frozen more than $2.7 billion connected to the theft. Of that amount, it said, more than $1.2 billion was subject to court-authorized seizure or restraint. The figures are stated as minimums, and the release does not give a precise total for assets recovered, still moving, or beyond reach.
According to the Justice Department, TraderTraitor members stole more than $6 billion in virtual assets from Binance on or about October 29. The department said investigators and industry partners are continuing to trace and secure the funds, while the group continues laundering assets through cryptocurrency bridges, mixers and exchanges. An FBI Cyber Alert issued with the U.S. Secret Service and IRS Criminal Investigation urged crypto services to block transactions involving addresses used by the actors or derived from the stolen assets.
Binance said in an October 30 update that its initial investigation suggested a compromised DevOps engineer’s laptop may have allowed an attacker to access a service container and submit unauthorized withdrawal transactions. The exchange said it had found no evidence that wallet private keys were leaked. Binance estimated the incident’s impact at about $6.3 billion and said it would cover losses with its SAFU fund and company funds, telling users their funds were safe. Those details are Binance’s account of its investigation and response.
Binance Hack: Court Authorizes Asset Seizure
The Justice Department says a court authorized seizure or restraint of cryptocurrency linked to the Binance hack. The action secures assets while recovery efforts continue, but does not decide who will receive them.
What the court action means
Securing assets is a step toward recovery, but it is not a final decision about ownership or repayment.
- Assets can be seized or restrained while proceedings continue.
- Investigators and industry partners continue tracing funds.
- No final forfeiture has been announced.
- Who may claim or receive funds has not been decided.
From theft to court action
The Justice Department attributes the theft to North Korean military members identified by the FBI as TraderTraitor.
What users should know
The reported figures do not establish how much has been returned or remains unrecovered.
- Binance said it would cover losses with its SAFU fund and company funds.
- The Justice Department has not said whether Binance, individual users or another claimant would receive any forfeited funds.
- Any return depends on later legal and administrative steps; no distribution timeline has been announced.
- Official recovery procedures do not require a fee. A demand for payment to recover forfeited money is fraud.
Recovery Is Not Repayment
The court authorization changes the legal status of some assets tied to the hack: the government can secure them while proceedings continue. But seizure or restraint is not forfeiture. It does not establish final ownership, and it does not automatically send money to Binance or its customers. A later forfeiture process would address whether property is linked to criminal activity and how eligible claims should be handled.
That distinction matters to affected users because the recipient of any recovered funds remains unresolved. Binance has said it will cover customer losses itself, but the Justice Department’s announcement does not say whether Binance, individual users or another claimant would receive assets eventually forfeited. The release also does not identify a court, case number or forfeiture complaint.
The figures show substantial recovery activity, but they do not establish that the full loss has been recovered. More than $2.7 billion frozen is not the same as money returned, and the department’s minimum figures do not allow a precise calculation of how much remains unrecovered. The reported continuing movement of assets adds urgency to efforts to identify and block transactions.
Products Worth Considering

Jackery Solar Generator 1000 v2 with Two 100W Solar Panels, 1024Wh LiFePO4 Battery

Bose TV Speaker Compact Soundbar with Bluetooth and HDMI-ARC, Black

Apple Watch SE 3 GPS 44mm Smartwatch
As an affiliate, we earn on qualifying purchases.
From October Theft to Court Action
Binance disclosed the security incident on October 30, the day after the theft date cited by the Justice Department. Its initial statement described a possible compromise involving an employee laptop and unauthorized withdrawal transactions, while saying it had found no evidence of a private-key leak. Binance also said it would cover losses using its emergency SAFU reserve and company funds.
The department’s November 12 announcement was part of a broader action concerning North Korean cryptocurrency theft and also addressed the FaceStealer malware operation. For the Binance incident, the department attributed the theft to TraderTraitor, a name the FBI uses for the group. Its advisory asked cryptocurrency services to block transactions tied to addresses used in laundering the stolen assets.
Federal asset-forfeiture procedures distinguish securing property from permanently taking ownership of it. The Justice Department describes civil judicial forfeiture as a proceeding against the property; claimants may assert an interest. Its victim-compensation program says forfeited money can be returned through remission or restoration processes. Those general procedures do not establish how claims in this particular case will be resolved.
Ownership and Recovery Still Open
The Justice Department’s announcement does not name the court or case number behind the authorization, and it does not describe a filed forfeiture complaint. It is also unclear how much of the reported frozen value is covered by the court action, beyond the department’s statement that more than $1.2 billion is subject to seizure or restraint.
No final decision has been announced on who may claim the assets or how any forfeited funds would be distributed. The source material says Binance plans to cover user losses, but it does not explain whether that plan affects any later claims to recovered property. The department’s figures are all “more than” amounts, so they do not establish an exact unrecovered balance.
The cause of the intrusion also remains under investigation. Binance described a possible laptop compromise and said it had found no evidence of a wallet private-key leak. The Justice Department’s statement attributes the theft to TraderTraitor but does not provide technical findings that independently settle how access was gained.
Tracing and Forfeiture Proceedings
The Justice Department says efforts to trace, freeze, seize and forfeit the stolen assets are continuing. Crypto companies have been asked by the FBI advisory to block transactions involving identified TraderTraitor addresses and related funds. Further court filings or announcements could clarify the legal basis for the orders, the assets covered and the process for people or entities seeking to claim them.
Any return of forfeited funds would depend on later legal and administrative steps, including any applicable claimant process. Users should distinguish official recovery procedures from unsolicited requests for payment: the source material says the Justice Department’s victim-compensation guidance warns that recovering forfeited money does not require a fee and that a demand for a fee is fraud. No timeline for final forfeiture or distribution has been announced.
Key Questions
Did a court approve the seizure of more than $1.2 billion?
The Justice Department said it obtained court authorization to seize or restrain more than $1.2 billion tied to the Binance theft. Its wording does not mean the assets have been finally forfeited.
How much has been frozen so far?
The department reported that government and private-sector efforts had frozen more than $2.7 billion. It did not provide an exact total, and frozen assets are not necessarily funds already returned to victims.
Who does the Justice Department blame for the Binance hack?
The department attributes the theft to members of the North Korean military, identified by the FBI as TraderTraitor. Binance separately said its initial investigation suggested a possible compromise involving a DevOps engineer’s laptop.
Will Binance users receive money from the seized assets?
That has not been decided publicly. Seizure or restraint secures property during a case; a later forfeiture and claims process would determine ownership or distribution. Binance has said it will cover losses with its SAFU fund and company funds.
Should users pay a fee to recover funds?
No fee should be required under the Justice Department victim-compensation guidance cited in the source material. It warns that a request for a fee is fraud; users should treat unsolicited recovery offers cautiously.
Source: ThorstenMeyerAI.com
