US Justice Department seizes infrastructure tied to North Korea’s $400M FaceStealer crypto scheme

Crypto firms that hire or operate remotely can no longer treat a familiar face on a video call as proof of identity; engineering and treasury teams will need secondary verification, such as callback numbers or internal codes, before anyone installs software flagged during a meeting. Workers who handle wallet keys or deployment access become higher-value targets, and HR and IT departments inherit the job of vetting video calls the way they once vetted email attachments. (per decrypt.co)

The scheme exposes how AI-generated video undermines the trust-based hiring and onboarding culture that much of the crypto industry still runs on, where remote teams and anonymous contributors are normal. The parallel DOJ push to seize $1.2 billion tied to the Binance hack also tests how far forfeiture law can reach once stolen crypto moves through mixers and offshore exchanges, a recovery process that remains far slower than the theft itself.

The outcome to track is whether the DOJ's forfeiture action on the $1.2 billion in Binance-linked funds results in completed seizures or stalls in cross-border enforcement, since North Korean operators typically route stolen assets through jurisdictions outside US reach. Any indictments naming individuals behind FaceStealer, rather than just seized infrastructure, would signal whether Washington can attach consequences beyond disruption.

Total crypto marketall crypto assets combined no single asset in the event: read against the whole market

The total crypto market fell 0.6% in the 4 hours after the first headline, after rising 0.1% in the 2 hours before.

48 prices, one every 30 minutes