Key Highlights:
- DOJ says more than $6 billion stolen on or about Oct. 29 was linked to North Korean military actors known as TraderTraitor.
- The larger figure represents the total frozen amount, while the smaller figure covers assets for which DOJ reports “seize or restrain” authority.
- Binance has pledged to absorb the financial impact of the theft, but the final amount forfeited, recipients, and timing of any recovery remain unclear.
DOJ Pursues Recovery of Assets Linked to TraderTraitor
The U.S. Department of Justice says efforts to trace, freeze, seize, and forfeit assets connected to the theft of more than $6 billion on or about Oct. 29 are still underway. DOJ attributed the theft to North Korean military actors known as TraderTraitor, saying the attackers continued laundering the stolen cryptocurrency through bridges, mixers, and exchanges.
The figures cited in the department’s account distinguish between the overall pool of frozen assets and the smaller portion covered by reported court-backed authority. The larger figure measures the combined freezing effort, while the smaller one identifies the portion for which DOJ reports seizure or restraint authority.
DOJ’s detailed account uses the wording “seize or restrain” but does not specify how much of the covered pool falls into either category. The authorization therefore establishes the scope of court-backed action over part of the frozen assets without confirming that the entire amount has already been seized.
Binance Had Promised to Cover the Loss
Binance had already committed to covering its losses in its Nov. 3 incident report. The exchange said it would absorb the financial impact of the stolen funds and had set aside more than 100% of the amount required to cover the loss.
The DOJ’s Nov. 12 announcement describes forfeiture efforts as ongoing. It does not identify the eventual recipients of any forfeited assets or explain how those assets would be distributed. The announcement also does not establish when any recovery or return to affected parties might occur.
Why This Matters
The court authorization represents progress in efforts to recover the stolen cryptocurrency, but it does not resolve the central questions surrounding compensation. DOJ’s general guidance on compensation from forfeited assets helps distinguish between securing assets and paying victims: before remission can occur, the government must identify, seize, and forfeit the assets.
As a result, the Nov. 12 announcement leaves the ultimate recovery process unresolved. The amount that will eventually be forfeited, the parties that may receive recovered assets, and the timing of any return remain unspecified while investigators continue tracking funds moved through cryptocurrency bridges, mixers, and exchanges.
Frequently Asked Questions
Who does DOJ blame for the theft?
DOJ attributed the theft of more than $6 billion on or about Oct. 29 to North Korean military actors known as TraderTraitor.
Does the court authorization mean all the frozen funds have been seized?
No. The authorization covers a portion of the frozen assets and provides “seize or restrain” authority, but it does not establish that the entire amount is already seized.
When will victims receive recovered funds?
No timetable has been announced. The assets must first be identified, seized, and forfeited before any remission can occur, and DOJ has not specified the eventual recipients or distribution process.
