The us DoJ said it obtained a court order to "freeze or seize" $1. 2 billion out of the $6. 7bn stolen from Binance
It also disrupted the infrastructure used in FaceStealer attacks
Most of the Binance funds remain unaccounted for
The US Department of Justice (DoJ) has said it was granted court authorization to “seize or restrain” $1. 2 billion recently stolen from Binance. In late October 2026, Binance reported losing $6. 7 billion in a highly sophisticated heist that played out over roughly 20 minutes. In the days that followed, we learned that the heist was carried out by TraderTraitor , a subset of the infamous Lazarus Group, notorious North Korean state-sponsored threat actors responsible for some of the biggest crypto robberies to ever happen. The community rallied around Binance, helping trace the funds and label the attackers’ wallets. Now, US law enforcement says at least part of those funds was seized or frozen. The agency did not say what that meant, how it was done, or if Binance will ever see those tokens again. Almost $3bn seized
“Since the theft, the National Security Division’s National Security Cyber Section, the Criminal Division’s Computer Crime and Intellectual Property Section, the U. S. Attorney’s Office for the District of Columbia, and law enforcement partners have worked closely with virtual asset service providers (VASPs) to interdict the stolen assets,” the DoJ said in the announcement. “Collective U. S. government and private sector efforts so far have resulted in the freeze of more than $2. 7 billion, with the Department having already obtained court-authorization to seize or restrain in excess of $1. 2 billion of that amount.” In the same report, the DOJ also said the US government disrupted cloud-based infrastructure that North Korean hackers used in a social engineering scheme called FaceStealer…