🔍 Read the full analysis: A Court-Approved Binance Hack Seizure: What We Know About The Funds on ThorstenMeyerAI.com
Get business pricing on office and shipping supplies
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
The U.S. Justice Department said on Nov. 12 that it had obtained court authorization to seize or restrain more than $1.2 billion in cryptocurrency stolen from Binance. The department says more than $2.7 billion has been frozen through government and private-sector efforts, while the assets’ ultimate ownership and any return to victims remain unresolved.
The U.S. Justice Department said on November 12 that it had obtained court authorization to seize or restrain more than $1.2 billion in cryptocurrency stolen in an October hack of Binance. The department attributes the theft to members of the North Korean military known to the FBI as TraderTraitor, but the court action does not amount to a final decision on who owns the funds or who will receive them.
The department said government and private-sector efforts had frozen more than $2.7 billion in assets linked to the theft. That broader total includes the more than $1.2 billion covered by court-authorized seizure or restraint, according to the release. These are minimum figures: the department used “more than” for both amounts, and did not provide a precise accounting of the remaining assets.
U.S. officials said the attackers stole more than $6 billion in virtual assets from Binance on or about October 29. The Justice Department said some of the stolen cryptocurrency remains in motion, with TraderTraitor actors continuing to launder it through cryptocurrency bridges, mixers and exchanges. It said efforts to trace, freeze, seize and forfeit the assets are ongoing.
The announcement’s wording matters. A seizure or restraint secures property while legal proceedings continue; it does not by itself transfer ownership to the government or establish which victims are entitled to compensation. The department’s November 12 release did not name a court or case number and did not announce a final forfeiture decision.
Binance hack funds What the court action means
U.S. authorities secured court authorization to seize or restrain cryptocurrency linked to the hack. The funds’ ownership and any return to victims remain unresolved.
Three amounts, different meanings
The figures describe reported progress, not a confirmed recovery total.
Funds secured
Seizure or restraint preserves assets during legal proceedings; it does not decide ownership or pay claimants.
Assets frozen
Government and private-sector efforts account for the larger reported frozen amount, which includes the court-authorized funds.
More assets in motion
The DOJ says some cryptocurrency is still being laundered through bridges, mixers and exchanges.
What happens to the funds?
Authorities and private companies work to locate and secure assets.
Further legal proceedings would determine whether assets can be permanently taken.
Any return would depend on future proceedings and claims; no payout plan or schedule has been announced.
Who may receive a recovery?
The announcement does not settle whether Binance or individual users would be recognized as claimants.
- Binance says it will cover losses using its own funds.
- The DOJ describes possible victim-compensation routes through remission or restoration.
- No final ownership finding or forfeiture decision was announced.
- How any forfeited funds would be allocated is unclear.
What the Court Orders Secure
The court-authorized action is a step toward preserving cryptocurrency that could otherwise be transferred or converted, but it is not a payment to Binance customers. The Justice Department distinguishes seizure or restraint from forfeiture, the legal process that determines whether property can be permanently taken and what may happen to it afterward.
That distinction matters because the money’s eventual destination is unsettled. The source material says it is not yet clear whether Binance or individual users would be recognized as claimants in any forfeiture or compensation process. Binance has said it will cover losses from its own funds, but that statement does not establish how a government recovery would be distributed.
The case also shows why the frozen amount and the court-authorized amount are different measures. Companies may be able to freeze assets or accounts quickly; court orders then apply to some of the assets. Funds moved before they can be blocked may be harder to trace and recover. The department’s figures describe progress, not a final recovery total.
Products Worth Considering

Apple iPad 11-inch (A16), 128GB, Wi-Fi, Silver

Dell XPS Tower 8960 Desktop, Intel Core i7-13700, NVIDIA GeForce RTX 4060, 16GB DDR5, 512GB SSD

FLEXISPOT Electric Adjustable Workbench, 48 x 30 in, Maple
As an affiliate, we earn on qualifying purchases.
From October Theft to Court Action
Binance said in an October 30 security incident update that its initial investigation suggested a compromised DevOps engineer’s laptop may have allowed an attacker to access a service container and submit unauthorized withdrawal transactions. The exchange said it had found no evidence of a wallet private-key leak. Those are Binance’s preliminary findings, not a final public determination of how the incident occurred.
Binance estimated the total impact at around $6.3 billion and said about $3 billion had been frozen on-chain at that point. It also said it would cover all losses using its SAFU emergency reserve and company funds, and told users their funds were safe. The Justice Department later described the stolen amount as more than $6 billion; the two estimates come from separate statements and are not identical measures.
On November 12, the department said an FBI Cyber Alert issued with the U.S. Secret Service and IRS Criminal Investigation attributed the theft to TraderTraitor and urged cryptocurrency service providers to block transactions involving addresses used to launder the stolen assets. The announcement therefore combines asset-recovery steps with a warning to companies handling cryptocurrency transactions.
“immediately halt about half of this historic breach”
— Assistant Attorney General A. Tysen Duva
Ownership and Recovery Remain Open
The Justice Department release does not identify the court, case number or a forfeiture complaint related to the announced amount. It also does not say that a court has made a final finding about ownership or ordered funds returned to any claimant. Seizure or restraint is not final forfeiture, and the process for any eventual compensation has not been specified in the announcement.
The exact amount still unrecovered cannot be calculated from the figures provided. The reported theft, frozen assets and court-authorized amount are all stated as minimums, and the department does not give a complete transaction-by-transaction accounting. It says some assets continue to be laundered through bridges, mixers and exchanges.
It is also unclear how any forfeited funds would be allocated between Binance and affected users. Binance has pledged to cover losses itself, while the Justice Department’s victim-compensation process can involve petitions for remission or restoration. No decision applying those processes to this hack was reported.
Tracing and Forfeiture Proceedings
The Justice Department says tracing, freezing, seizure and forfeiture work is continuing, while the FBI alert asks cryptocurrency service providers to block transactions involving addresses linked to TraderTraitor’s laundering activity. The next concrete developments would include additional asset-recovery announcements, court filings or rulings that clarify the legal status of the restrained funds.
Any potential return of forfeited property would depend on future legal proceedings and claims by people or organizations asserting an interest in it. The department says its victim-compensation process may return forfeited money through remission petitions or restoration, but it has not announced a process or timetable for this particular case.
People contacted about recovering funds should be cautious of requests for payment. The source material states that U.S. victim-compensation rules do not require a fee to recover forfeited money and warns: “If you are asked to pay a fee, it is fraud.” No recovery schedule or individual payout has been announced.
Key Questions
How much cryptocurrency is covered by the court action?
The Justice Department said it had court authorization to seize or restrain more than $1.2 billion in cryptocurrency tied to the Binance theft. That is not the same as a final forfeiture or a confirmed amount returned to victims.
How much has been frozen overall?
The department reported that government and private-sector efforts had frozen more than $2.7 billion. The release gives minimum figures and does not provide a precise total or a full breakdown of the assets.
Who does the U.S. government blame for the hack?
The Justice Department attributes the theft to members of the North Korean military whom the FBI calls TraderTraitor. Binance’s separate October 30 statement described its initial investigation into a possible compromised engineer’s laptop; that was a preliminary account from the exchange.
Will Binance users receive the seized funds?
That has not been decided. Seizure or restraint does not determine ownership, and the Justice Department has not announced a final forfeiture or payout plan for this case. Binance has said it will cover losses from its own funds.
What happens to the rest of the stolen cryptocurrency?
The Justice Department says recovery efforts are ongoing and that some assets are still being laundered through cryptocurrency bridges, mixers and exchanges. The exact unrecovered amount and the timing of any further recovery remain unknown.
Source: ThorstenMeyerAI.com
