The Federal Bureau of Investigation (FBI) announced on a Thursday that it has seized more than $1.2 billion in cryptocurrency stolen from Binance. The seizure follows a theft of approximately $6.3 billion from the platform last month, which the FBI has attributed to the North Korean hacking group known as TraderTraitor.
According to the Justice Department, the U.S. government and the private sector have combined to freeze more than $2.7 billion of the stolen funds to date. The Justice Department stated it has now obtained court authorization to either seize or restrain the $1.2 billion portion of those recovered assets. Under standard procedure, the government will file a forfeiture claim with a judge, who is responsible for determining which parties have legitimate claims to the funds.
Additionally, the FBI identified North Korea as the source of a separate "social engineering" scheme called FaceStealer. Officials reported this operation resulted in the theft of $400 million in cryptocurrency over the past 18 months. The scheme involved hijacking messaging applications and using deepfake videos to defraud victims. U.S. officials stated that North Korea uses such cyber schemes to fund government operations, including its weapons program.
This action affects the users of Binance and victims of the FaceStealer scheme who lost assets to these specific thefts. The scale of the recovery involves $1.2 billion in seized assets out of a total $6.3 billion stolen from Binance, alongside a separate $400 million stolen through social engineering. While the recovery represents a significant portion of the $2.7 billion currently frozen, individual users will not see immediate changes to their account balances. The return of funds depends on a judicial forfeiture process, where a judge must verify individual claims before any assets are redistributed to account holders or the exchange.
For the broader cryptocurrency market and financial institutions, these seizures demonstrate the capacity of federal agencies to track and intercept digital assets across borders. Bill Essayli, First Assistant U.S. Attorney for the Central District of California, stated that the action is part of a larger effort to combat cybercrime utilized by "rogue states." The use of deepfakes and messaging app hijacking in the FaceStealer scheme highlights methods of digital fraud.
What happens next involves legal proceedings in federal court. The U.S. government must finalize the forfeiture claims to gain permanent ownership of the assets before they can be returned to victims. No specific dates for these hearings or deadlines for victim claims were reported. The FBI and Justice Department indicated they will continue to track the remaining stolen funds, as more than $3 billion from the original Binance heist remains unrecovered.