DOJ Seizes Over $1.2 Billion From North Korea's Binance Theft and Disrupts FaceStealer Deepfake Scheme

Analysis
High confidence rests on a primary DOJ statement that more than $2.7 billion is frozen while courts have authorized only $1.2 billion in seizures or restraints, leaving a large balance still unsecured. That is the shift since the November 2 edition, which covered attribution and the block-address alert. The Justice Department will likely announce additional seizures, forfeiture complaints or restraints tied to the Binance theft by December 31, 2026. The Record and Security Affairs track the DOJ on core figures, though Security Affairs mostly replicates the DOJ text, so the convergence adds little independent weight. TraderTraitor's laundering through bridges, mixers and worthless-token liquidity pools could move assets out of reach before orders issue, and whether FaceStealer's targeting of NPM and Rust maintainers also breached Binance remains unresolved. The announcement may be chiefly deterrence and awareness, since private freezes can persist without new DOJ filings and recoveries could surface quietly. Exchanges and issuers holding frozen funds should plan for forfeiture and restitution claims if seizures follow, and should assume the remainder is being laundered out and keep tightening address blocking if none appear by year end.