🔍 Read the full analysis: Binance Hack Funds In Court: The Approved Seizure And The Search For The Rest on ThorstenMeyerAI.com
Get everyday essentials delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
The U.S. Justice Department said on November 12 that courts authorized the seizure or restraint of more than $1.2 billion in cryptocurrency linked to the October Binance hack. Government and private-sector efforts have frozen more than $2.7 billion, but the funds have not been finally forfeited and the department says laundering efforts continue.
The U.S. Justice Department said courts have authorized the seizure or restraint of more than $1.2 billion in cryptocurrency stolen from Binance, a major step in efforts to recover funds from the October 29 hack. The department said government and private-sector partners have frozen more than $2.7 billion so far, while the alleged North Korean operators continue trying to move assets through cryptocurrency services.
The Justice Department’s November 12 announcement attributed the theft to members of the North Korean military, identified by the FBI as the group TraderTraitor. The department said the theft occurred on or about October 29 and involved more than $6 billion in virtual assets. Those descriptions and figures are the government’s account; the announcement did not identify a court or provide a case number for the seizure and restraint orders.
The department said collective government and private-sector efforts had resulted in the freezing of more than $2.7 billion, of which more than $1.2 billion was covered by court authorization to seize or restrain. The terms do not mean the government has permanently taken ownership of the funds. A seizure or restraint secures property while legal proceedings continue; forfeiture is a separate process that can determine whether property is transferred to the government and potentially returned to victims.
Binance said in an October 30 update that its initial investigation pointed to a possible compromise of a DevOps engineer’s laptop, which may have allowed an attacker to access a service container and submit unauthorized withdrawals. The company said it had found no evidence that wallet private keys were leaked. Binance estimated the incident’s impact at about $6.3 billion and said it would cover losses with money from its SAFU reserve and company funds. It told customers their funds were safe.
Binance Hack Funds in Court The search continues
Courts authorized seizure or restraint of more than $1.2 billion linked to the October hack. The funds are not finally forfeited, and efforts to trace assets continue.
What the figures mean
Each amount describes a different stage in the recovery effort.
Held during proceedings
Seizure or restraint secures property while legal proceedings continue. It does not transfer ownership permanently.
Forfeiture remains unresolved
A separate process must determine whether funds go to the government and may be returned to victims.
From hack to court orders
The company’s early figures and commitments differ from the later government account.
What remains unknown
The announcement leaves key questions for customers and other potential claimants.
- Which court issued the orders and the case number
- How much remains outside freezes or court orders
- Who may claim forfeited property and when
- Binance says it will cover customer losses
- Government recovery would require further proceedings
- No return of court-authorized funds is established
The Difference Between Frozen and Recovered
The court-authorized action establishes a legal basis to hold a substantial portion of the tracked assets, but it does not resolve who is entitled to receive the money. That distinction matters to Binance customers and any other parties who may claim an interest. The Justice Department has not said whether Binance, individual users, or another claimant would seek recovery through a forfeiture process.
The figures also show why the recovery effort is not over. The more than $2.7 billion frozen and more than $1.2 billion under court authorization are minimum figures with different legal statuses, not a final accounting of recovered funds. Authorities say assets that move through bridges, mixers or exchanges can be harder to trace and block. The department says the alleged operators are still laundering funds, so the status of the remaining assets could change.
For affected users, Binance’s statement that it will cover losses is separate from any government process. U.S. victim-compensation guidance says recovering forfeited money does not require paying a fee; the department warns that a demand for an upfront fee is fraud. Customers should not treat a message promising a payout as proof of an official recovery process.
Products Worth Considering
Bose SoundLink Max Portable Bluetooth Speaker, IP67 Waterproof, Black
Apple iPad 11-inch (A16), 128GB, Wi-Fi, Silver
Bose TV Speaker Compact Soundbar with Bluetooth and HDMI-ARC, Black
As an affiliate, we earn on qualifying purchases.
From October Theft to Court Orders
Binance said on October 30 that it was investigating unauthorized withdrawals and put the estimated impact at about $6.3 billion. At that point, the company said roughly $3 billion had been frozen on-chain and pledged to cover losses from its own funds and the SAFU emergency reserve. Those were Binance’s figures and commitments, not a final law-enforcement accounting.
On November 12, the Justice Department described the later recovery effort in broader terms: more than $2.7 billion frozen through government and private-sector work, with court authorization to seize or restrain more than $1.2 billion of that amount. It said the FBI, U.S. Secret Service and IRS Criminal Investigation had also issued a cyber alert urging cryptocurrency services to block transactions with, or derived from, addresses used by TraderTraitor.
The department’s announcement addressed another North Korea-related crypto action involving a group called FaceStealer, but the available source material does not provide details about that matter. The Binance-related figures and claims should not be conflated with it.
“Immediately halt about half of this historic breach.”
— Assistant Attorney General A. Tysen Duva
Ownership and Remaining Funds
The Justice Department has not named the court or case number associated with the orders, and its announcement did not say that a forfeiture complaint had been filed. It is therefore unclear which forfeiture route may apply, what evidence will be presented, or when a court could decide the final disposition of the assets.
It is also unknown exactly how much of the stolen cryptocurrency remains outside freezes or court orders. The department’s figures are stated as “more than” amounts, and it says laundering is ongoing through cryptocurrency bridges, mixers and exchanges. Because the figures do not provide a complete accounting or a single confirmed baseline, the unrecovered share cannot be calculated from the announcement.
The eventual claimant is also unresolved. Binance has said it will cover customer losses, but the department has not said whether Binance, individual users or others would claim forfeited property. The source material does not establish that any of the court-authorized funds have been returned to victims.
Tracing, Claims and Court Proceedings
The Justice Department says efforts to trace, freeze, seize and forfeit the stolen assets are continuing. Cryptocurrency exchanges and other service providers are being urged by the FBI alert to block transactions linked to addresses used by TraderTraitor. Further public updates could clarify the total amount located, the court orders and any forfeiture filings.
If property is eventually forfeited, the Justice Department’s victim-compensation program says eligible victims may receive funds through petitions for remission or restoration. Those processes would require further legal and administrative steps; the November 12 announcement does not set a timeline for them or guarantee a particular payment to Binance users.
Binance’s stated plan to cover losses remains a separate development to follow. The next confirmed milestones are any additional law-enforcement updates or court filings, plus any information Binance provides about how its customer reimbursement commitment is being carried out. Until then, the amounts frozen, legally restrained and ultimately returned should be treated as distinct and evolving figures.
Key Questions
The Justice Department said courts authorized the seizure or restraint of more than $1.2 billion in cryptocurrency linked to the theft. That is not the same as a final forfeiture or a completed return to victims.
How much has been frozen so far?
The department said government and private-sector efforts had frozen more than $2.7 billion. The figure is a minimum, and the announcement does not provide a complete accounting of all stolen or recovered assets.
Has a court decided who gets the money?
No such decision is described in the announcement. Seizure or restraint holds property during a case; forfeiture and any victim compensation require further proceedings. The department has not identified the eventual claimant.
What does Binance say about customer losses?
Binance said it would cover losses from its SAFU reserve and company funds. That commitment is separate from the Justice Department’s effort to trace and recover stolen cryptocurrency.
Is the recovery effort finished?
No. The Justice Department said efforts are ongoing and that the alleged operators continue laundering assets through bridges, mixers and exchanges. The amount still unrecovered is not established by the figures released so far.
Source: ThorstenMeyerAI.com
