The United States Department of Justice announced on Thursday that it has obtained court authority to seize or restrain more than $1.2 billion in cryptocurrency assets linked to a massive theft from the digital exchange Binance. This legal action forms part of a broader, ongoing freeze of approximately $2.7 billion in funds intercepted by federal authorities and private-sector partners, which officials estimate accounts for roughly half of the assets pilfered during the October breach. Investigations have attributed the incident to the North Korean hacking collective known as TraderTraitor, a group historically linked to extensive state-sponsored cybercrime.
How did the hackers carry out the theft and impersonation scheme?
Beyond the Binance breach, federal authorities announced the disruption of a sophisticated social engineering operation dubbed "FaceStealer" that has resulted in more than $400 million in losses over the last 18 months. The Federal Bureau of Investigation detailed that this campaign uses AI-generated deepfake video technology and prerecorded footage of trusted contacts to deceive individuals during video calls. By tricking employees into installing malicious software under the guise of legitimate communication, the attackers gain unauthorized access to internal systems. The infrastructure seized by the FBI contained a library of over 900 secretly captured webcam videos used to convincingly impersonate victims in subsequent attacks against other targets, including maintainers of open-source software projects.
"It exploits our trust in ubiquitous video conference platforms and valued personal relationships," said Patrick Grandy, the assistant director in charge of the FBI’s Los Angeles field office, as reported by CyberScoop.
What is the current status of the stolen funds and Binance's response?
While the DOJ has secured legal authorization to move toward forfeiture of the $1.2 billion, the underlying assets remain part of a larger volume of intercepted funds frozen at various token issuers and crypto platforms. Regarding the scale of the theft, reporting varies: Bitcoin Magazine notes that North Korean actors stole more than $6 billion from Binance on or about October 29, whereas The Crypto Times references total hack losses reaching $6.34 billion. Binance has confirmed that it addressed user losses through its internal treasury, futures insurance funds, and its Secure Asset Fund for Users, rather than through the recovery of stolen coins. The exchange stated that it has already covered the total amount taken during the incident.
What happens next in the investigation?
Despite the recent enforcement actions, the ultimate recovery of all stolen assets remains uncertain. The Department of Justice indicated that TraderTraitor operatives are actively attempting to launder funds through various decentralized exchanges, mixers, and cross-chain bridges. While the DOJ is pursuing formal forfeiture to eventually take ownership of the frozen $1.2 billion, investigators have not yet established a definitive timeline for these legal proceedings or the final distribution of recovered assets. Furthermore, specific court documents detailing the basis for the latest seizures have not been publicly released. Authorities continue to monitor illicit wallet addresses, and the FBI has issued a Cyber Alert urging virtual asset service providers to remain vigilant against transactions originating from known North Korean infrastructure.
Sources: This report draws on coverage by Bitcoin Magazine, CyberScoop, The Record from Recorded Future News, CoinDesk, The Block, Decrypt, Boston Herald, Sky News. The wording is our own.
Market Snapshot
| Asset | Price | 24h | Market Cap |
|---|---|---|---|
 Bitcoin BTC | $68,647 | -6.51% | $1380.6B |
 Ethereum ETH | $1,922 | -5.70% | $234.9B |
 BNB BNB | $633.65 | -5.82% | $83.3B |
 XRP XRP | $1.01 | -2.46% | $64.3B |
 Solana SOL | $78.56 | -4.87% | $46.5B |
 Dogecoin DOGE | $0.0638 | -4.61% | $10.0B |
 Cardano ADA | $0.168 | -2.30% | $6.3B |
Live data: CoinGecko — 2026-11-13 05:22 UTC
