🔍 Read the full analysis: Binance Hack: The US Can Pursue Over $1.2 Billion. What About The Remaining Funds? on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
The Justice Department said on November 12 that it had obtained court authorization to seize or restrain more than $1.2 billion in cryptocurrency stolen from Binance. Government and private-sector efforts have frozen more than $2.7 billion, while North Korean actors are still laundering assets, according to the department. The orders do not amount to final forfeiture or establish who will receive recovered funds.
The U.S. Justice Department said November 12 it had obtained court authorization to seize or restrain more than $1.2 billion in cryptocurrency stolen in an October attack on Binance. The department says government and private-sector efforts have frozen more than $2.7 billion in total, but the orders do not decide who ultimately owns the funds or how much will be returned to customers.
The department attributed the theft to members of the North Korean military, identified by the FBI as the group TraderTraitor. It said the actors stole more than $6 billion in virtual assets from Binance on or about October 29. These figures and the attribution are claims in the department’s announcement; the release describes the funds as stolen and the recovery work as continuing.
The Justice Department said the more than $2.7 billion frozen reflects combined government and private-sector efforts. Of that amount, it has obtained court authorization to seize or restrain more than $1.2 billion. The department’s figures are all stated as minimums, so they do not establish an exact total for frozen, legally restrained or unrecovered assets. A freeze can prevent movement, while a court-authorized seizure or restraint secures property during proceedings; neither by itself transfers ownership to victims.
Binance’s October 30 statement said its initial investigation suggested a compromised DevOps engineer’s laptop may have given an attacker access to a service container and enabled unauthorized withdrawals. The company said it had found no evidence that wallet private keys were leaked. Binance estimated the impact at about $6.3 billion and said it would cover losses using its SAFU reserve and company funds, adding that user funds were safe.
Binance Hack: Court Orders Secure Funds Recovery Is Not Repayment
The US says courts authorized action on more than $1.2 billion linked to the theft. Legal steps still stand between securing assets and deciding who receives them.
What the orders mean
The Justice Department announced the court authorization on November 12, 2026.
- Frozen assets are prevented from moving.
- Seizure or restraint preserves property during proceedings.
- No final forfeiture has been announced.
- Ownership and any return to customers remain unsettled.
How the case developed
Who may receive recovered funds?
The announcement does not identify who will claim the property or how any return would work.
Possible claimants
The announcement does not establish that Binance users will receive forfeited assets.
Loss coverage pledged
Binance said it would cover customer losses with its SAFU reserve and company funds.
Later steps required
A return may involve petitions for remission or restoration after forfeiture.
What remains unclear
The Justice Department’s figures are minimums, not a complete accounting.
- The exact amount still missing is unknown.
- The orders’ covered assets and next court proceedings are not specified.
- The department says laundering through bridges, mixers and exchanges continues.
Why Recovery Is Not Repayment
The gap between a freeze and a payout matters to Binance customers and potential claimants. The court-authorized measures may keep a large amount of cryptocurrency from being moved while legal proceedings continue, but they do not establish that Binance users will receive the assets. The Justice Department has not announced a final forfeiture or identified who will make a claim to the property.
The department’s victim-compensation process can return forfeited assets through petitions for remission or restoration, including transfers to a court for restitution. Those processes come after property is forfeited and are distinct from an interim seizure or restraint. The outcome could affect whether recovered assets go to Binance, its customers, or another eligible claimant; the announcement does not settle that question.
For people contacted about supposed recovery services, the distinction also creates a fraud risk. The source material cites U.S. victim-compensation guidance warning that victims do not have to pay a fee to recover forfeited money: a request for an advance fee is a fraud warning. The Justice Department announcement does not describe a fee-based recovery process.
Products Worth Considering
Samsung 37-inch Odyssey G7 Curved 4K UHD Gaming Monitor (G75F)
LG UltraGear 32-Inch QHD 180Hz Curved Gaming Monitor
Apple AirPods Pro 3 Wireless Earbuds with Active Noise Cancellation
As an affiliate, we earn on qualifying purchases.
From October Theft to Court Orders
Binance disclosed the security incident on October 30, saying its investigation was at an early stage. Its account pointed to a possible compromise of an engineer’s laptop and unauthorized withdrawal transactions, while stating that the exchange had not found evidence of leaked private keys. Binance said it would cover customer losses itself. The November 12 Justice Department announcement concerns the subsequent effort to trace and secure assets, rather than a new finding about how the breach occurred.
The department said the stolen cryptocurrency is being laundered through bridges, mixers and exchanges. It also said the FBI issued a cyber alert with the U.S. Secret Service and IRS Criminal Investigation, urging crypto services to block transactions involving addresses associated with TraderTraitor and assets derived from them. The department’s announcement bundled this Binance-related action with another action involving North Korean crypto theft, but the Binance recovery figures are the central development for affected users.
Federal forfeiture is a separate legal stage. The Justice Department describes civil judicial forfeiture as a proceeding against property in which the government must prove a connection to criminal activity. A seizure or restraint preserves assets while such matters proceed; it is not a ruling that the funds have been forfeited or a decision on which victims are entitled to them.
The exact amount still missing cannot be calculated from the Justice Department’s figures. The department gave minimum totals for the theft, the freeze and the court-authorized actions, rather than a complete accounting of all assets and their current status. It says some cryptocurrency remains in motion through laundering routes, but does not give a precise unrecovered balance.
The announcement also does not identify a court, provide a case number or describe a forfeiture complaint. It is therefore unclear what forfeiture proceedings will follow, which assets each order covers, and when a court may decide ownership. The announcement does not say whether Binance itself or individual users would be the claimant for any forfeited funds.
Binance has said it will cover customer losses from its own funds and reserves. The source material does not explain how that commitment would interact with any later return of recovered assets, or whether customers would receive additional payments from forfeiture proceedings. The department’s announcement is not a final judgment on those issues.
Tracing and Forfeiture Proceedings
The Justice Department says efforts to trace, freeze, seize and forfeit the assets are continuing. Crypto services have been urged by the FBI to block transactions associated with TraderTraitor addresses and assets derived from them. Further public updates could clarify how much additional cryptocurrency is located and whether more court orders are sought.
A final return to victims would require later legal and administrative steps, rather than following automatically from the current seizure or restraint orders. Readers should watch for a court filing or department notice that identifies the relevant proceedings, assets and process for making claims. Until those details are available, the amount ultimately forfeited and the people or entities who receive it remain unsettled.
Key Questions
How much linked to the Binance hack has the US frozen?
The Justice Department says government and private-sector efforts have frozen more than $2.7 billion. It says courts authorized seizure or restraint of more than $1.2 billion of that amount. Both are minimum figures, not exact totals.
Does the $1.2 billion order mean victims will be paid?
No. A seizure or restraint secures property while proceedings continue. It is not final forfeiture and does not decide who owns the assets or who will receive any funds returned later.
Who does the Justice Department blame for the theft?
The department attributes the theft to members of the North Korean military, whom the FBI calls TraderTraitor. Binance separately said its initial investigation suggested a possible compromise involving an engineer’s laptop. These are attributed statements, not a final public court finding described in the announcement.
What is Binance’s position on customer losses?
Binance said it would cover all losses from its SAFU fund and company funds. The Justice Department announcement does not say how that commitment relates to any assets that may later be forfeited and returned through victim-compensation procedures.
How much of the stolen cryptocurrency is still missing?
The exact unrecovered amount is not clear. The department says recovery work is ongoing and that some assets continue to be laundered, but its figures are minimum totals and do not provide a complete accounting.
Source: ThorstenMeyerAI.com
