US wins court authority over $1.2B in stolen Binance crypto

US authorities said on Nov. 12 that a court had authorized the seizure or restraint of more than $1.2 billion in cryptocurrency stolen from Binance in an Oct. 29 hack that took more than $6 billion. The order covers funds already frozen; it does not mean the money has been returned to the exchange or its users. The Justice Department’s announcement says tracing and recovery work is continuing.

The figures mark different stages of the response. The US government and private companies have frozen more than $2.7 billion of the stolen assets, according to the Justice Department. More than $1.2 billion of that frozen total now has court authorization for seizure or restraint. A freeze prevents funds from being moved; seizure or restraint under court authority gives the government a legal basis to pursue control of them.

• More than $6 billion stolen: The Justice Department says North Korean military members, whom the FBI calls TraderTraitor, took the virtual assets from Binance on or about Oct. 29. The Associated Press reported the theft at about $6.3 billion.
• More than $2.7 billion frozen: US agencies and private-sector partners have blocked that amount so far. The government has not said that all of it will ultimately be recovered or returned.
• More than $1.2 billion targeted by court orders: The Justice Department says it has obtained authorization to seize or restrain that portion of the frozen assets.

For people following the recovery, the distinction matters: the court action is a step toward taking control of funds, not a payout announcement. In similar cases, the government typically files a forfeiture claim with a judge, who then decides who has a valid claim to recovered property, the Associated Press reported. The Justice Department’s release does not set out a timetable for such a claim or say how any recovered assets would be distributed.

The investigation is also a race to keep the funds from moving. The department says TraderTraitor actors are laundering assets through cryptocurrency bridges, mixers and exchanges. Bridges move tokens between blockchains, while mixers are services designed to make transaction trails harder to follow. Last week, the FBI, Secret Service and IRS Criminal Investigation issued an alert attributing the theft to TraderTraitor and urging virtual asset service providers to block transactions tied to addresses the group is using.

That request puts exchanges and other crypto services in the response chain: they may be able to flag or block transactions connected to identified wallet addresses. The Justice Department says law enforcement is working with these providers to trace and freeze funds, but the laundering routes make the effort ongoing. The court authorization applies to the assets specified in the government’s action; it does not establish that every stolen coin has been located.

The FBI has attributed the theft to North Korean actors, and the Justice Department says recovery efforts are ongoing. The next signal is whether authorities can trace more of the funds and bring forfeiture claims before a judge. Until then, the $1.2 billion figure describes court-authorized action against part of the frozen haul, not money already back in users’ hands.

Source material

• Justice Department’s announcement — justice.gov
• Associated Press reported — apnews.com