Binance Hack Funds: A Guide To The US Court’s Approval To Seize Over $1.2 Billion
AIThis post was created with the assistance of artificial intelligence (AI).

🔍 Read the full analysis: Binance Hack Funds: A Guide To The US Court’s Approval To Seize Over $1.2 Billion on ThorstenMeyerAI.com

Buying for a business?Offer from Amazon

Get business pricing on tech for your team

  • Business-only prices and quantity discounts
  • Tax-exempt purchasing
  • Multiple users, one account, clear invoices
As an affiliate, we earn on qualifying purchases.

TL;DR

The Justice Department said on November 12 that it had obtained court authorization to seize or restrain more than $1.2 billion in cryptocurrency stolen from Binance. US officials attribute the October 29 theft to North Korean-linked actors called TraderTraitor, but the court action is not a final forfeiture, and who will receive recovered funds has not been determined.

The US Justice Department said November 12 that it had obtained court authorization to seize or restrain more than $1.2 billion in cryptocurrency linked to the October 29 Binance hack. The department attributes the theft to North Korean military members known to the FBI as TraderTraitor; the court action secures assets while the case proceeds but does not decide who ultimately owns or receives them.

The Justice Department said the cryptocurrency was part of more than $6 billion in virtual assets stolen from Binance on or about October 29. It reported that government agencies and private-sector partners had frozen more than $2.7 billion in assets so far, with more than $1.2 billion of that amount covered by court authorization to seize or restrain. These are official minimum figures, not exact totals.

The announcement uses the paired legal terms “seize or restrain”. A seizure or restraint preserves control of assets while proceedings continue; it is not the same as forfeiture, which is a later legal process for determining whether property can be permanently taken. The department’s release did not name the court or provide a case number, and it did not announce a final forfeiture decision.

Binance said in an October 30 security update that its initial investigation suggested a compromised DevOps engineer’s laptop may have enabled unauthorized withdrawals. The company estimated the total impact at about $6.3 billion, said roughly $3 billion had been frozen on-chain at that time, and said it would cover losses using its SAFU reserve and company funds. Binance also said it had found no evidence that wallet private keys were leaked.

At a glance
updateWhen: Announced November 12, 2026; tracing an…
The developmentThe Justice Department announced court-authorized seizure or restraint of more than $1.2 billion tied to the October Binance hack.
Binance · Legal briefing

Court authorizes action on Binance hack funds

The US Justice Department says more than $1.2 billion in cryptocurrency linked to the hack can be seized or restrained. The order preserves assets while proceedings continue; it does not return funds or decide who receives them.

More than $1.2B
covered by court authorization
More than $2.7B
assets frozen, officials report
More than $6B
virtual assets stolen from Binance, officials say

What the order means

Seizure or restraint can keep assets under control while the case proceeds.

Now
  • Assets may be secured during proceedings.
  • Investigators continue tracing funds.
Not decided
  • No final forfeiture ruling was announced.
  • Who may receive recovered funds remains unresolved.

How events unfolded

October 29
Binance hack; officials say more than $6 billion in virtual assets were stolen.
October 30
Binance reported a possible employee laptop compromise and said it would cover losses.
November 12, 2026
The Justice Department announced court authorization to seize or restrain more than $1.2 billion.

What remains open

The announcement leaves key details for affected customers and businesses unresolved.

  • The court and case number were not named.
  • The release does not say whether a forfeiture case has been filed.
  • Binance’s commitment to cover losses is separate from federal recovery.
  • Officials attribute the theft to North Korean-linked actors known as TraderTraitor; this is not a court finding described in the announcement.
Watch for fraudThe Justice Department warns that requests for an upfront fee for supposed compensation are fraudulent.
The takeaway
The order secures funds while the case continues; it does not promise repayment or establish who will receive recovered assets.

What the Court Order Secures

The authorization marks a major legal step in efforts to recover cryptocurrency from a breach that affected Binance itself. Freezing or restraining assets can prevent some funds from being moved while investigators and courts address the case. But the figures do not mean that $1.2 billion has already been returned to Binance or its customers.

The distinction matters to users deciding what to expect from recovery efforts. The Justice Department says its work to trace, freeze, seize and forfeit funds continues, while Binance has said it will cover the losses. Who would be recognized as a claimant for any funds ultimately forfeited—Binance, individual users, or other parties—has not been established in the announcement.

The department also warned that the alleged operators continue laundering assets through cryptocurrency bridges, mixers and exchanges. That makes the recovery effort relevant beyond the initial court action: investigators and service providers are still trying to identify and block funds as they move between platforms and networks.

Products Worth Considering

Bose QuietComfort Headphones (2nd Gen), Wireless Over-Ear Noise-Cancelling Headphones, Black

Bose QuietComfort Headphones (2nd Gen), Wireless Over-Ear Noise-Cancelling Headphones, Black

As an affiliate, we earn on qualifying purchases.

From Binance Breach to Federal Action

Binance first described the incident publicly on October 30, saying its initial assessment pointed to a possible compromise of an employee’s laptop and unauthorized withdrawal transactions. At that stage, the company estimated losses at around $6.3 billion and reported about $3 billion frozen on-chain. It said customer funds were safe and that it would cover losses from its own resources.

On November 12, the Justice Department announced its recovery figures and attributed the theft to members of the North Korean military, identified by the FBI as TraderTraitor. The department said the FBI, US Secret Service and IRS Criminal Investigation had also issued a cyber alert urging cryptocurrency services to block transactions involving addresses used by the group to launder the stolen assets.

Under the Justice Department’s general explanation of asset forfeiture, a civil judicial forfeiture case concerns the property itself and can proceed without a criminal conviction. The government must prove the property’s connection to criminal activity under the applicable standard. The November 12 announcement, however, did not identify a forfeiture complaint or establish which legal route will apply to these funds.

“Collective U.S. government and private sector efforts so far have resulted in the freeze of more than $2.7 billion, with the Department having already obtained court-authorization to seize or restrain in excess of $1.2 billion of that amount.”

— US Department of Justice

Who May Claim Recovered Assets

The announcement leaves several central questions unanswered. It does not name the court, provide a case number, describe the specific assets covered, or say whether a forfeiture action has been filed. Court authorization to seize or restrain is not a final ownership ruling, and the release does not say when a court might decide whether the funds can be forfeited.

It is also unclear how much of the stolen cryptocurrency remains beyond the reach of authorities. The department says more than $2.7 billion has been frozen and more than $1.2 billion is subject to court authorization, while the alleged operators continue moving other assets. Because each figure is a minimum and the totals may cover overlapping stages of recovery, the unrecovered balance cannot be calculated precisely from the release.

The Justice Department’s general victim-compensation guidance describes ways forfeited money can be returned, including petitions for remission or restoration to support restitution. It has not said which process, if any, will apply here or whether Binance or individual customers would make claims. Binance’s promise to cover losses does not resolve how any later forfeiture would be distributed.

Tracing and Court Proceedings Continue

The Justice Department says efforts to trace, freeze, seize and forfeit the stolen assets are ongoing. Crypto platforms and other service providers have been urged to block transactions linked to addresses identified by the FBI alert. Further public details may emerge if the department files forfeiture papers or releases additional information about court orders and the assets they cover.

For affected Binance customers, the company’s stated commitment to cover losses remains distinct from the federal recovery process. The department’s announcement does not set a date for repayment through forfeiture or say whether customers need to file claims. Anyone contacted about supposed compensation should treat requests for an upfront fee as a fraud warning, consistent with the department’s guidance.

Key Questions

Did the court order return $1.2 billion to Binance customers?

No. The Justice Department said the court authorized the government to seize or restrain more than $1.2 billion. That action does not itself return the money or decide who is entitled to it.

How much cryptocurrency was frozen?

The department reported that government and private-sector efforts had frozen more than $2.7 billion. It said more than $1.2 billion of that amount was covered by court authorization to seize or restrain. Both figures are stated as minimums.

Who does the US blame for the Binance theft?

The Justice Department attributes the theft to members of the North Korean military. It says the FBI refers to the group as TraderTraitor. This is the government’s attribution, not a court finding described in the announcement.

Has it been decided who will receive any forfeited money?

No. The announcement does not identify a final claimant or explain how any funds would be distributed. The court action is not a final forfeiture, and the department did not say whether Binance, individual users or other parties would seek the assets.

Will Binance cover customer losses?

Binance said on October 30 that it would cover all losses using its SAFU fund and company funds. The Justice Department’s recovery effort is separate, and its November 12 announcement did not change or detail Binance’s payment arrangements.

Source: ThorstenMeyerAI.com

You May Also Like

What’s Behind Fake Precedents In Korean Courts? 360 Judges Weigh In

A South Korean court survey of 360 judges found widespread reports of false case citations and calls for new rules on verification and AI disclosure.

The European Union: Rules First, Cushion Always

The EU emphasizes regulation and social protections over ownership in managing AI and labor transition, shaping a unique economic model.

What xAI’s Grok Build CLI Actually Sends to xAI

Confirmed: The Grok Build CLI transmits user build data to xAI servers, raising privacy and security questions. Details on what is sent remain unclear.

ShinyHunters · The New APT Model.

ShinyHunters has evolved into a scalable, AI-enabled threat collective operating as a brand and affiliate network, redefining enterprise cyber risks in 2026.