The U.S. Department of Justice announced Thursday that it has obtained court authorization to seize or restrain more than $1.2 billion in cryptocurrency stolen from Binance [1]. The seizure is part of a broader law enforcement response to a massive cyberattack on the cryptocurrency exchange that occurred on October 29, during which over $6 billion was stolen [1]. The DOJ attributed the attack to actors linked to the North Korean military, which the FBI refers to as "TraderTraitor" [1].
Collective efforts between the U.S. government and private-sector partners have successfully frozen more than $2.7 billion of the $6 billion stolen total, though efforts to track and freeze remaining assets are ongoing as TraderTraitor actors continue to launder funds through various cryptocurrency channels [1]. The DOJ characterized these actions as coordinated efforts against "the North Korean government's schemes to fund its regime through the massive theft of cryptocurrency" [1].
Beyond the Binance seizure, authorities have also disrupted cloud-based infrastructure used in a separate social-engineering campaign known as "FaceStealer," which has stolen more than $400 million in cryptocurrency over 18 months [1]. The FaceStealer scheme employs AI-generated deepfakes and fake video meetings to deceive victims, with cryptocurrency and web3 industry professionals identified as prime targets [1]. FBI Assistant Director in Charge Patrick Grandy described FaceStealer as "a highly effective social engineering scheme capable of deceiving even the most experienced technical and security conscious computer user" [1].
CONCLUSION
The $1.2 billion seizure represents a significant law enforcement victory against North Korean-linked cybercriminals, though it recovers less than half of the $6 billion stolen from Binance, signaling ongoing challenges in tracking and recovering cryptocurrency assets. The parallel disruption of the FaceStealer infrastructure underscores broader cybersecurity threats targeting the cryptocurrency industry, likely to intensify scrutiny of exchange security protocols and investor confidence in digital asset platforms.