DOJ Moves to Seize $1.2 Billion Stolen in Binance Hack

As part of a package of actions against cryptocurrency theft attributed to North Korea, the U.S. Justice Department announced on November 12, 2026, that it had obtained court authorization to seize or restrain more than $1.2 billion in cryptocurrency stolen from the Binance exchange.

What happened at Binance?

According to the department, on or about October 29, members of the North Korean military, whom the FBI calls "TraderTraitor", stole digital assets worth more than $6 billion from the exchange. Media estimates of the haul vary depending on asset prices at the time of calculation.

How was part of the money recovered?

Since the theft, Justice Department and FBI units have worked with virtual asset platforms and private-sector firms to trace the funds. According to specialist outlets citing the U.S. government, more than $2.7 billion of the stolen assets has been frozen across several platforms, and the latest court authorization covers more than $1.2 billion of that amount.

The Record quoted an FBI agent as saying it is not yet clear whether FaceStealer techniques played a role in the Binance breach.

Lessons for users and exchanges

• Keep large balances in cold (offline) wallets instead of leaving them on an exchange.
• Turn on two-factor authentication with an authenticator app or a security key, and avoid SMS codes where possible.
• Ignore unexpected "tech support" links or meeting invitations, even if they seem to come from someone you know.