DOJ moves to seize $1.2B from Binance hack, disrupts FaceStealer scam
- Published
- Updated
The DOJ said it has court authorization to seize or restrain more than $1.2 billion in crypto tied to North Korean hackers’ theft from Binance. The same announcement also described an FBI operation targeting FaceStealer, a separate scheme that uses stolen webcam footage to impersonate trusted people on video calls.
Key claims & sources
What it means
Binance has already been part of one of the best-known crypto exchange hacks, and the U.S. Department of Justice is still working through the legal aftermath of that theft. The seizure authority now covers crypto linked to North Korean hackers, which places the case in the long-running conflict between exchange security failures, cybercrime, and later asset recovery. The separate FaceStealer matter sits in the same law-enforcement lane: digital theft followed by an attempt to recover or restrain the assets after the fact.
For people who use exchanges, this is a reminder that stolen crypto does not simply vanish when it leaves the platform. Freeze and seizure actions can lock up assets that move through wallets and intermediaries, and they can also widen the role of courts in deciding who can touch funds that were once on-chain. Builders and compliance teams have to assume that stolen funds can become the subject of formal recovery efforts long after the original exploit. (per cointelegraph.com)
This case shows a familiar tension in crypto between open transferability and law-enforcement tracing. The same properties that let assets move quickly across borders also let investigators follow them and try to restrain them through courts, which pushes the industry toward more surveillance, more controls, and more interaction with centralized institutions. At the same time, the FaceStealer angle shows that the threat is no longer only chain-based theft; identity fraud and social engineering now sit alongside blockchain exploits.
What remains unclear is how much of the Binance-linked crypto the DOJ will ultimately secure and what the next court steps will be. The release identifies the amount covered by the authorization and the FaceStealer operation, but it does not settle which assets are still recoverable or how much of the stolen value will stay reachable. The timeline for any final resolution also remains open, with the legal process still unfolding after the Thursday announcement.
Market reaction i
The total crypto market fell 0.5% in the 4 hours after the first headline, after a flat 2 hours before.
33 prices, one every 30 minutes
Coverage timeline
Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.
Cointelegraph
scoop
Unchained
adds
Has this happened before?
| When | What happened | Figure |
|---|---|---|
| 35 days ago | DOJ Seeks $61.2 Million in Crypto Tied to Iranian Oil Sales event | 2 actors in common · 4 news media |
| 3 days ago | Binance Shuts Down Transfers Involving MEXC and Its Affiliates event | 1 actors in common · 4 news media |
| 7 days ago | Treasury cuts off MEXC Global over alleged $16 billion in transactions linked to Iran, North Korea and Russia event | 1 actors in common · 18 news media |
| 8 days ago | U.S. Justice Department assembles force to shield against foreign AI threats event | 1 actors in common · 3 news media |
| 15 days ago | India Names Binance and Bybit Among Foreign Platforms in $585M Crypto Remittance Probe event | 1 actors in common · 4 news media |