🔍 Read the full analysis: Binance Hack: US Court Ruling Targets Over $1.2 Billion—What’s Left To Trace? on ThorstenMeyerAI.com
Get smart everyday buys delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
The US Justice Department said on November 12 that courts authorized the seizure or restraint of more than $1.2 billion in cryptocurrency stolen from Binance. Government and private-sector efforts have frozen more than $2.7 billion, while the department says the alleged North Korean thieves continue to move assets through crypto services. Court authorization is not final forfeiture, and who would receive recovered funds has not been decided.
The US Justice Department said on November 12 that it had obtained court-authorized orders to seize or restrain more than $1.2 billion in cryptocurrency stolen from Binance, a major step in efforts to recover funds from the October 29 hack. The department says more than $2.7 billion has been frozen through government and private-sector action, but the orders do not amount to a final decision on who owns the assets or who will receive them.
The Justice Department attributes the theft to members of the North Korean military, identifying the group as TraderTraitor, a name used by the FBI. The department says the group stole more than $6 billion in virtual assets from Binance on or about October 29. Those figures and the attribution are the government’s account; the supplied announcement does not describe a court finding on the alleged perpetrators.
The department said the combined freeze total exceeds $2.7 billion, of which more than $1.2 billion is now subject to court-authorized seizure or restraint. Assistant Attorney General A. Tysen Duva said law enforcement and private-sector partners had helped “immediately halt about half of this historic breach.” US Attorney Jeanine Ferris Pirro described the action as “seizing more than $1.2 billion of their stolen assets,” while the department’s formal wording specifies that the property was authorized to be seized or restrained.
Binance said in an October 30 update that its initial investigation pointed to a possible compromise of a DevOps engineer’s laptop, which may have enabled unauthorized withdrawal transactions. The exchange said it had found no evidence that wallet private keys were leaked and would cover losses with its SAFU reserve and company funds. It told customers their funds were safe. The Justice Department’s recovery announcement does not identify a court, case number or forfeiture complaint.
Binance Hack What’s Left to Trace?
US courts authorized seizure or restraint of more than $1.2 billion in cryptocurrency linked to the hack. The orders secure assets during proceedings; they do not decide who owns them or who will be paid.
From breach to court action
The hack was dated to on or about October 29; the Justice Department announced the orders on November 12.
What the orders mean
Securing assets is one stage of recovery, not a final decision on them.
- Assets are frozen, seized or restrained.
- Authorities and service providers continue tracing funds.
- Whether assets will be forfeited.
- Who is entitled to any recovered funds.
Why tracing continues
The department says the alleged North Korean actors continue moving assets through crypto services.
Cross-network movement
Moving funds between networks can complicate tracking.
Harder to follow
The department says alleged actors use mixers to move assets.
Service-provider action
Authorities have urged crypto services to block transactions linked to associated addresses.
What the Orders Mean for Recovery
The court orders represent a substantial attempt to secure assets linked to the breach, but restraint is not repayment. A seizure or restraint preserves property during legal proceedings; it does not itself establish final ownership. Forfeiture is a later legal step, and the department’s announcement does not say that the more than $1.2 billion has been finally forfeited or returned to Binance or its customers.
The distinction matters because funds can be frozen before the government establishes who is entitled to them. The Justice Department’s asset-forfeiture process allows people claiming an interest in property to submit claims in relevant proceedings. In this case, it remains unresolved whether Binance, individual customers or another claimant would be recognized as entitled to any assets ultimately recovered. Binance’s statement that it will cover the losses is separate from the government’s efforts to trace and secure stolen cryptocurrency.
The figures also show that recovery is a moving process, not a settled accounting. More than $2.7 billion has been frozen, but the department says the alleged actors continue to launder assets. It has not supplied enough information to calculate the precise amount still outside government or private-sector control.
Products Worth Considering
Dell XPS Tower 8960 Desktop, Intel Core i7-13700, NVIDIA GeForce RTX 4060, 16GB DDR5, 512GB SSD
Vari Ergo Electric Standing Desk, 54×26, Light Wood/White
Logitech MX Mechanical Wireless Illuminated Keyboard, Tactile Quiet, Graphite
As an affiliate, we earn on qualifying purchases.
From Binance Breach to Court Action
Binance disclosed the security incident on October 30, one day after the theft it dates to on or about October 29. The exchange put the estimated impact at about $6.3 billion and said approximately $3 billion had been frozen on-chain at that point. It described the suspected access route as a compromised engineer’s laptop and unauthorized withdrawal transactions, while stressing that this was an initial assessment.
The November 12 Justice Department announcement addressed the subsequent recovery effort. It said government agencies and private companies had frozen more than $2.7 billion and that courts had authorized seizure or restraint of more than $1.2 billion of that total. The FBI, working with the US Secret Service and IRS Criminal Investigation, also issued a cyber alert urging crypto services to block transactions involving addresses associated with TraderTraitor or assets derived from them.
The department says the investigation and asset tracing are continuing. It reports that the alleged actors have moved funds through cryptocurrency bridges, mixers and exchanges. Those methods can complicate efforts to follow and freeze assets, particularly when funds move before a service provider or authority can act.
““Collective U.S. government and private sector efforts so far have resulted in the freeze of more than $2.7 billion.””
— US Department of Justice
Ownership and Remaining Funds
The Justice Department has not named the court or case number behind the seizure-or-restraint orders, and its announcement does not mention a forfeiture complaint. It is therefore unclear what procedural steps have been filed publicly, how long the orders will remain in effect, or when a court might decide whether the assets can be forfeited.
The exact amount still at large cannot be calculated from the announcement. The department describes the theft, freezes and court-authorized amount as “more than” stated thresholds, and the figures refer to different stages of the process. The source material does not provide a full accounting of what was stolen, frozen, restrained, recovered or still being moved.
It is also not clear who would receive assets if they are ultimately forfeited. The Justice Department says eligible victims may seek compensation under its procedures, but this announcement does not identify Binance or its customers as claimants or say how any recovered money would be distributed. The department warns that victim compensation does not require a fee; anyone asked to pay one should treat the request as fraud.
Tracing and Forfeiture Proceedings
The Justice Department says efforts to trace, freeze, seize and forfeit the stolen cryptocurrency are ongoing. Authorities and service providers will continue monitoring addresses and transactions they associate with TraderTraitor, while the department says the alleged actors are moving assets through bridges, mixers and exchanges.
A later forfeiture process would determine whether property can be permanently taken under the law. If assets are forfeited, a separate victim-compensation process could address claims to the funds. No schedule for those steps, hearing date or distribution decision was included in the announcement, so the next public milestone is not yet clear.
Key Questions
How much cryptocurrency did the US say it had secured?
The Justice Department said more than $2.7 billion had been frozen through government and private-sector efforts. It said courts authorized seizure or restraint of more than $1.2 billion of that amount.
Does the court order mean Binance customers will be repaid?
No. Seizure or restraint secures assets during proceedings but does not decide ownership or distribution. The Justice Department has not said who would receive any assets ultimately forfeited.
Who does the Justice Department blame for the hack?
The department attributes the theft to members of the North Korean military and says the FBI refers to the group as TraderTraitor. That is the government’s attribution; the announcement does not report a court finding establishing responsibility.
What does Binance say happened to customer losses?
Binance said it would cover all losses using its SAFU fund and company funds. It also said its initial investigation suggested a possible compromise of a DevOps engineer’s laptop, while reporting no evidence of a wallet private-key leak.
Can someone charge a fee to help victims recover the money?
The supplied source says US victim-compensation rules do not require a fee to recover forfeited funds. The Justice Department warns: “If you are asked to pay a fee, it is fraud.”
Source: ThorstenMeyerAI.com
