🔍 Read the full analysis: Binance Hack Funds: A Guide To The US Court’s Approval To Seize Over $1.2 Billion on ThorstenMeyerAI.com
Get business pricing on tech for your team
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
The Justice Department said on November 12 that it had obtained court authorization to seize or restrain more than $1.2 billion in cryptocurrency stolen from Binance. US officials attribute the October 29 theft to North Korean-linked actors called TraderTraitor, but the court action is not a final forfeiture, and who will receive recovered funds has not been determined.
The US Justice Department said November 12 that it had obtained court authorization to seize or restrain more than $1.2 billion in cryptocurrency linked to the October 29 Binance hack. The department attributes the theft to North Korean military members known to the FBI as TraderTraitor; the court action secures assets while the case proceeds but does not decide who ultimately owns or receives them.
The Justice Department said the cryptocurrency was part of more than $6 billion in virtual assets stolen from Binance on or about October 29. It reported that government agencies and private-sector partners had frozen more than $2.7 billion in assets so far, with more than $1.2 billion of that amount covered by court authorization to seize or restrain. These are official minimum figures, not exact totals.
The announcement uses the paired legal terms “seize or restrain”. A seizure or restraint preserves control of assets while proceedings continue; it is not the same as forfeiture, which is a later legal process for determining whether property can be permanently taken. The department’s release did not name the court or provide a case number, and it did not announce a final forfeiture decision.
Binance said in an October 30 security update that its initial investigation suggested a compromised DevOps engineer’s laptop may have enabled unauthorized withdrawals. The company estimated the total impact at about $6.3 billion, said roughly $3 billion had been frozen on-chain at that time, and said it would cover losses using its SAFU reserve and company funds. Binance also said it had found no evidence that wallet private keys were leaked.
Court authorizes action on Binance hack funds
The US Justice Department says more than $1.2 billion in cryptocurrency linked to the hack can be seized or restrained. The order preserves assets while proceedings continue; it does not return funds or decide who receives them.
What the order means
Seizure or restraint can keep assets under control while the case proceeds.
- Assets may be secured during proceedings.
- Investigators continue tracing funds.
- No final forfeiture ruling was announced.
- Who may receive recovered funds remains unresolved.
How events unfolded
What remains open
The announcement leaves key details for affected customers and businesses unresolved.
- The court and case number were not named.
- The release does not say whether a forfeiture case has been filed.
- Binance’s commitment to cover losses is separate from federal recovery.
- Officials attribute the theft to North Korean-linked actors known as TraderTraitor; this is not a court finding described in the announcement.
What the Court Order Secures
The authorization marks a major legal step in efforts to recover cryptocurrency from a breach that affected Binance itself. Freezing or restraining assets can prevent some funds from being moved while investigators and courts address the case. But the figures do not mean that $1.2 billion has already been returned to Binance or its customers.
The distinction matters to users deciding what to expect from recovery efforts. The Justice Department says its work to trace, freeze, seize and forfeit funds continues, while Binance has said it will cover the losses. Who would be recognized as a claimant for any funds ultimately forfeited—Binance, individual users, or other parties—has not been established in the announcement.
The department also warned that the alleged operators continue laundering assets through cryptocurrency bridges, mixers and exchanges. That makes the recovery effort relevant beyond the initial court action: investigators and service providers are still trying to identify and block funds as they move between platforms and networks.
Products Worth Considering

Jackery Solar Generator 1000 v2 with 100W Solar Panel

DJI Mic 3 (2 TX + 1 RX + Charging Case) Wireless Microphone

Bose QuietComfort Headphones (2nd Gen), Wireless Over-Ear Noise-Cancelling Headphones, Black
As an affiliate, we earn on qualifying purchases.
From Binance Breach to Federal Action
Binance first described the incident publicly on October 30, saying its initial assessment pointed to a possible compromise of an employee’s laptop and unauthorized withdrawal transactions. At that stage, the company estimated losses at around $6.3 billion and reported about $3 billion frozen on-chain. It said customer funds were safe and that it would cover losses from its own resources.
On November 12, the Justice Department announced its recovery figures and attributed the theft to members of the North Korean military, identified by the FBI as TraderTraitor. The department said the FBI, US Secret Service and IRS Criminal Investigation had also issued a cyber alert urging cryptocurrency services to block transactions involving addresses used by the group to launder the stolen assets.
Under the Justice Department’s general explanation of asset forfeiture, a civil judicial forfeiture case concerns the property itself and can proceed without a criminal conviction. The government must prove the property’s connection to criminal activity under the applicable standard. The November 12 announcement, however, did not identify a forfeiture complaint or establish which legal route will apply to these funds.
“Collective U.S. government and private sector efforts so far have resulted in the freeze of more than $2.7 billion, with the Department having already obtained court-authorization to seize or restrain in excess of $1.2 billion of that amount.”
— US Department of Justice
Who May Claim Recovered Assets
The announcement leaves several central questions unanswered. It does not name the court, provide a case number, describe the specific assets covered, or say whether a forfeiture action has been filed. Court authorization to seize or restrain is not a final ownership ruling, and the release does not say when a court might decide whether the funds can be forfeited.
It is also unclear how much of the stolen cryptocurrency remains beyond the reach of authorities. The department says more than $2.7 billion has been frozen and more than $1.2 billion is subject to court authorization, while the alleged operators continue moving other assets. Because each figure is a minimum and the totals may cover overlapping stages of recovery, the unrecovered balance cannot be calculated precisely from the release.
The Justice Department’s general victim-compensation guidance describes ways forfeited money can be returned, including petitions for remission or restoration to support restitution. It has not said which process, if any, will apply here or whether Binance or individual customers would make claims. Binance’s promise to cover losses does not resolve how any later forfeiture would be distributed.
Tracing and Court Proceedings Continue
The Justice Department says efforts to trace, freeze, seize and forfeit the stolen assets are ongoing. Crypto platforms and other service providers have been urged to block transactions linked to addresses identified by the FBI alert. Further public details may emerge if the department files forfeiture papers or releases additional information about court orders and the assets they cover.
For affected Binance customers, the company’s stated commitment to cover losses remains distinct from the federal recovery process. The department’s announcement does not set a date for repayment through forfeiture or say whether customers need to file claims. Anyone contacted about supposed compensation should treat requests for an upfront fee as a fraud warning, consistent with the department’s guidance.
Key Questions
Did the court order return $1.2 billion to Binance customers?
No. The Justice Department said the court authorized the government to seize or restrain more than $1.2 billion. That action does not itself return the money or decide who is entitled to it.
How much cryptocurrency was frozen?
The department reported that government and private-sector efforts had frozen more than $2.7 billion. It said more than $1.2 billion of that amount was covered by court authorization to seize or restrain. Both figures are stated as minimums.
Who does the US blame for the Binance theft?
The Justice Department attributes the theft to members of the North Korean military. It says the FBI refers to the group as TraderTraitor. This is the government’s attribution, not a court finding described in the announcement.
Has it been decided who will receive any forfeited money?
No. The announcement does not identify a final claimant or explain how any funds would be distributed. The court action is not a final forfeiture, and the department did not say whether Binance, individual users or other parties would seek the assets.
Will Binance cover customer losses?
Binance said on October 30 that it would cover all losses using its SAFU fund and company funds. The Justice Department’s recovery effort is separate, and its November 12 announcement did not change or detail Binance’s payment arrangements.
Source: ThorstenMeyerAI.com
