🔍 Read the full analysis: US Court Approves Seizure Of Binance Hack Funds—What’s The Status Of The Rest? on ThorstenMeyerAI.com
Get business pricing on tech for your team
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
The Justice Department said on November 12 that it had obtained court authorization to seize or restrain more than $1.2 billion in cryptocurrency stolen from Binance. Officials say government and private-sector efforts have frozen more than $2.7 billion of the more than $6 billion stolen, while the remaining funds are still being laundered. The orders do not amount to final forfeiture or determine who will receive recovered assets.
The US Justice Department said on November 12 that it had obtained court authorization to seize or restrain more than $1.2 billion in cryptocurrency stolen from Binance in an October 29 attack. The department attributes the theft to members of the North Korean military, whom the FBI calls TraderTraitor; it says more than $2.7 billion of the stolen assets has been frozen through government and private-sector efforts, but the orders do not decide who ultimately owns or receives the money.
The Justice Department said the attack took more than $6 billion in virtual assets from Binance. Its November 12 announcement put the amount frozen so far by US agencies and private-sector partners at more than $2.7 billion, with court authorization to seize or restrain more than $1.2 billion of that total. The department described the figures as minimums, not final accounting of the assets.
Officials said the rest remains difficult to recover because the alleged attackers are laundering assets through cryptocurrency bridges, mixers and exchanges. The department said efforts to trace, freeze, seize and forfeit the funds continue. The FBI, US Secret Service and IRS Criminal Investigation also issued an alert asking crypto services to block transactions involving addresses used by TraderTraitor to launder the stolen assets.
Binance said in an October 30 security update that its initial investigation pointed to a potentially compromised DevOps engineer’s laptop, which may have allowed an attacker to access a service container and submit unauthorized withdrawal transactions. The exchange reported an estimated impact of about $6.3 billion and said roughly $3 billion had been frozen on-chain at that point. Binance said it would cover losses using its SAFU reserve and company funds, and that user funds were safe.
Binance hack funds seizure status
US authorities have secured court authorization for part of the stolen cryptocurrency. The orders preserve assets while proceedings continue; they do not decide who will receive them.
What the orders mean
Seizure or restraint secures property during legal proceedings; forfeiture is a separate process.
- Some assets are frozen or authorized for seizure or restraint.
- Authorities and private-sector partners continue tracing funds.
- No final forfeiture or victim payment has been announced.
- It is unclear whether Binance, users, or others will claim recovered assets.
Recovery hurdles
Officials say the alleged attackers are still laundering assets.
Funds keep moving
Cryptocurrency bridges, mixers, and exchanges make recovery difficult.
Claims remain unclear
The announcement does not identify who would receive any forfeited funds.
Figures are minimums
The stated amounts do not show exactly how much remains unrecovered.
What to watch next
The November 12 announcement gave no timetable for the next steps.
A filing could identify the court and legal basis for the orders.
Further legal action would be needed before ownership could transfer.
Authorities or Binance may report on recovered funds and customer compensation.
What the Court Orders Change
The orders are a significant step toward securing some of the assets, but they are not a ruling that the government—or any particular victim—owns them. Seizure or restraint preserves property while legal proceedings continue; forfeiture is a separate process that can transfer ownership after the required legal steps. The Justice Department’s announcement does not identify a court, case number or forfeiture complaint.
That distinction matters to Binance customers because it remains unclear whether recovered funds would be claimed by the exchange, which says it is covering the losses, or by individual users. A freeze can stop assets from moving, but it does not by itself compensate victims. Readers should also be wary of anyone demanding payment to recover funds: US victim-compensation guidance says there is no fee to receive recovered forfeited money, and that a request for a fee is fraud.
Products Worth Considering
Logitech MX Mechanical Wireless Illuminated Keyboard, Clicky Switches
Jackery Solar Generator 1000 v2 with Two 100W Solar Panels, 1024Wh LiFePO4 Battery
DJI Mini 5 Pro Fly More Combo with DJI RC 2
As an affiliate, we earn on qualifying purchases.
From Binance Breach to Recovery
The incident was an attack on Binance itself, rather than a separate theft whose proceeds happened to pass through the exchange. In its October 30 statement, Binance said its initial findings suggested unauthorized withdrawals may have followed access through a compromised employee device. It said it had found no evidence that a wallet private key had been leaked. These were the exchange’s preliminary findings, not a final public account of the attack.
The November 12 Justice Department release addressed the subsequent effort to trace and secure the stolen assets. Its figures distinguish between funds frozen by government and private-sector efforts and the smaller portion covered by court authorization to seize or restrain. The department also announced a separate action involving the North Korean-linked FaceStealer operation, but its Binance-related announcement centers on recovery of the stolen assets.
Under the Justice Department’s general explanation of asset forfeiture, civil judicial forfeiture is a court proceeding against property. The government must prove by a preponderance of the evidence that the property is linked to criminal activity. The department says forfeited assets may be returned to victims through remission or restoration processes. Those general rules do not establish how this specific case will be resolved.
“Collective U.S. government and private sector efforts so far have resulted in the freeze of more than $2.7 billion, with the Department having already obtained court-authorization to seize or restrain in excess of $1.2 billion of that amount.”
— US Justice Department
Ownership and Recovery Still Open
The department has not disclosed the court or case number behind the authorization, and its announcement does not say that a forfeiture case has concluded. It is also not clear who would claim recovered assets—Binance, individual account holders or another party with a legal interest. The announced figures are all minimums, so they do not allow an exact calculation of how much remains unrecovered.
The Justice Department says the alleged attackers continue laundering assets, but its release does not provide a complete ledger of where the remaining funds are or how much can still be traced. Binance’s account of the suspected entry point was preliminary, and the source material does not provide a final technical investigation or a public determination of individual customer losses.
Further Tracing and Court Proceedings
US agencies and private-sector partners say they will continue tracing and attempting to freeze, seize and forfeit assets linked to the attack. The department’s public alert asks crypto services to block transactions connected to the identified laundering addresses. Any eventual transfer of forfeited funds to victims would depend on further legal proceedings and the applicable claims or compensation process.
For now, the key milestones to watch are a public filing identifying the court and legal basis for the orders, any forfeiture action, and updates from Binance or authorities on funds recovered and customer compensation. No timetable for those steps was included in the November 12 announcement.
Key Questions
How much of the stolen cryptocurrency has been frozen?
The Justice Department says government and private-sector efforts have frozen more than $2.7 billion. It says more than $1.2 billion of that amount is covered by court authorization to seize or restrain. The figures are stated as minimums.
Does the court authorization mean victims have been paid?
No. A seizure or restraint secures assets while proceedings continue; it is not a final forfeiture and does not determine who receives the funds. The department has not announced a payment timetable.
Who does the US blame for the Binance hack?
The Justice Department attributes the theft to members of the North Korean military, identified by the FBI as TraderTraitor. That is the government’s stated attribution.
What did Binance say about customer losses?
Binance said it would cover losses using its SAFU emergency reserve and company funds, and told customers that user funds were safe. Its October 30 account of the suspected cause was described as an initial investigation, not a final technical finding.
Should victims pay a fee to recover seized funds?
No. The Justice Department’s victim-compensation guidance warns that a request for a fee to receive recovered forfeited money is fraud. Treat unsolicited recovery offers asking for payment with caution.
Source: ThorstenMeyerAI.com
