Price:

Court authorizes seizure of $1.2 billion in Binance funds

Nov 14, 2026Summary from 3 podcasts.
  • The DOJ can now move more than $1.2 billion in frozen Binance heist funds toward forfeiture.
  • Officials and private companies have frozen about $2.7 billion, roughly half the stolen assets.

The Justice Department has court authority to seize or restrain more than $1.2 billion from the October 29 Binance hack, moving those funds closer to forfeiture. The DOJ says government and private-sector efforts have frozen about $2.7 billion, roughly half the stolen assets. Binance separately reported that it had frozen or intercepted $2.85 billion by November 3.

The theft was valued at $6.34 billion by Binance. The FBI attributed the attack to North Korea, and Binance says it replaced the affected assets with company funds. The latest legal step concerns funds already stopped from moving; it does not mean all frozen assets have been forfeited.

The breach began with compromised employee machines and reached Binance’s internal wallet-signing systems, according to Ungovernable Misfits. The account described earlier intrusions, including a fake recruiter’s coding task, before attackers drained the wallets. That route matters: the reported failure was inside the exchange’s systems, not a direct theft of private keys.

The recovery effort also faces a sprawling trail. Elliptic says North Korean launderers routed about $430,000 through six self-created NEAR tokens, using liquidity pools to obscure transfers. That was a small slice of the theft; the broader operation has been tracked across more than 20,000 wallets and 16 blockchains.

The court authority gives investigators a path to pursue a portion of the funds already frozen. The wider tracing effort shows the other challenge: stolen crypto can be scattered across wallets and chains even when investigators can follow its public trail.

Source Intelligence

- Deep dive into what was said in the episodes

Jensen's Wang | Bitcoin News • Nov 13

  • The DOJ obtained court authority to seize or restrain more than $1.2 billion from North Korea's Binance heist, after government and private-sector efforts froze about $2.7 billion. Binance says it replaced affected assets from company funds, while the DOJ's court authorization moves frozen funds toward forfeiture.
Also discussed on this episode: (9)

Regulation (1)

  • David Bennett says Donald Trump nominated two Democrats and two Republicans to fill SEC and CFTC seats. The nominees include former CFTC commissioner Kristen Johnson and SEC veteran Steve Levine; Senate confirmation timing could determine whether the agencies avoid operating with skeleton commissions.

Big Tech (1)

  • Nvidia employees urged the board to reinstate Jensen Huang after his resignation, with an internal post drawing more than 1,600 comments. Reports alleged relationships with Alice Wong and two Nvidia employees; Attorney General Todd Blanche said the DOJ had not concluded Huang was a Chinese spy.

Open Source (1)

  • David Bennett argues that open-weight AI does not depend on Jensen Huang alone and that decentralized repositories would emerge if major platforms shut down. Bennett sees governments and AI companies as aligned around limiting access to models they cannot control or monetize.

BTC Markets (3)

  • David Bennett's market snapshot put Bitcoin at $68,480, with mining hash rate at 931 exahashes per second and high-priority fees at 5 sats per vbyte. Oil, metals, and equities were mixed or lower despite producer-price inflation coming in below forecasts.
  • Twenty One Capital reported $1.087 billion in third-quarter net income, driven by $1.093 billion in Bitcoin fair-value gains, while its operating loss was $4.8 million. CEO Rafa Zagury said asset appreciation is not operating earnings; the company is assessing mining, lending, treasury, and energy businesses.
  • MSCI plans to remove Strategy from several stock indexes after November 30, arguing that companies mainly holding financial assets do not belong in operating-company benchmarks. David Bennett says the exclusion could weaken Strategy's share-funded Bitcoin buying, though it does not force a Bitcoin sale.

Privacy (1)

  • France's National Assembly finance committee adopted a proposal requiring residents to report self-custodied crypto holdings worth at least €100,000 at year-end, with penalties up to €10,000 for non-reporting. David Bennett called the rule an intrusion into private wallet ownership.

Digital Sovereignty (1)

  • A listener's Spaces Protocol proposal uses a Bitcoin-anchored naming system to keep contact details discoverable without relying on one social platform or company. The proposal supports multiple network instances and says users can store space-name information directly on Bitcoin if the network is unavailable.

Markets (1)

  • BTCS sold Ether below cost to maintain collateral health on a $64.1 million Aave loan, leaving collateral worth about 155% of its debt. David Bennett argues that volatile crypto collateral makes DeFi borrowing dangerous in unsettled markets and recommends borrowing only a small fraction of the collateral's value.

AI and Used Jet Engines | Bitcoin News • Nov 10

  • Elliptic says North Korean launderers moved stolen Binance funds through six self-created NEAR meme coins, using liquidity pools to obscure direct wallet-to-wallet transfers and buy time. The tokens leave public on-chain trails; the wider theft response spans thousands of wallets and multiple blockchains.
Also discussed on this episode: (8)

Regulation (2)

  • Elizabeth Warren plans to use her expected Senate Banking Committee chairmanship to investigate prediction-market insider trading and manipulation, including election bets; she and John Curtis sought answers from Kalshi and Polymarket. David Bennett supports the crackdown, calling prediction markets gambling and arguing Warren’s focus could divert attention from Bitcoin.
  • Coinbase, Kalshi, Kraken, DRW Holdings, Jump Trading, and Paradigm filed a letter supporting the CFTC in a Southern District of New York case over its authority to regulate perpetual futures tied to individual stocks. The lawsuit was brought by the Capital Markets Alliance.

Labor (1)

  • Kayleen Fulton alleges the Ethereum Foundation fired her after she disclosed cancer and helped organize a staff letter opposing a job requirement tied to the new mandate; her complaint also alleges Vitalik Buterin helped enforce it. The mandate included a pledge to take one’s life with a sword, which the foundation’s lawyer called figurative.

Startups (1)

  • Anthropic set an IPO range of $70 to $78 a share, with trading targeted for November 19 and roughly 20% of shares allocated to retail buyers. David Bennett advises waiting after listing, arguing IPO spikes can leave retail investors holding losses as institutions sell.

Chips (1)

  • Google introduced two eighth-generation TPU systems for confidential computing and memory-heavy AI, and says its software can cut some data-transfer delays and startup times by more than 90%. David Bennett sees the launch as a threat to Nvidia, while Google’s performance comparisons are against its own earlier hardware, not Nvidia’s latest chips.

Inflation (1)

  • October CPI rose faster than forecast, and David Bennett argues higher rates may slow further inflation without reversing consumers’ existing price increases. Bitcoin traded at $72,890; the episode’s market roundup also put oil, metals, equities, network fees, and hash rate under pressure or below recent levels.

Nostr (1)

  • Zap Cooking combines Nostr recipe publishing with an iPhone app that searches recipes, scales ingredient quantities, and guides users through one cooking step at a time. David Bennett says its polished, practical design could bring people to Nostr; four new recipes had appeared since the previous day.

AI Infrastructure (1)

  • AI data-center developers are buying refurbished turbines and retired jet engines because new U.S. gas turbines take years to arrive. David Bennett argues on-site generation could ease grid pressure, though electricity delivery and aging grid infrastructure remain constraints.

The Hits Keep Coming | THE BITCOIN BRIEF 96 • Nov 9

  • Max reports that Binance’s hot wallets lost assets across several chains, including 18,270 BTC, in the largest exchange hack discussed. Binance said the losses were covered by its SAFU fund and company funds; the FBI attributed the attack to North Korea.
  • Max says the Binance attackers used compromised employee machines and internal signing systems rather than stealing private keys directly. Earlier intrusions involved a tampered Homebrew package and malware in a fake recruiter’s coding task, then spread through an internal AI tool.
Also discussed on this episode: (22)

Privacy (7)

  • Q and A says attackers exploited two linked flaws in Foundation’s self-hosted Cal.com and credential-management software, then sent more than 23,000 branded phishing emails to 21,500 addresses on October 25.
  • The breach exposed names, email addresses, order details, and archived support conversations; some records also contained postal addresses, phone numbers, and partial card details. Foundation says Passport and Envoy devices, software, and customer funds were unaffected.
  • Q and A says old WooCommerce records remained in database copies despite appearing redacted in the admin panel, while Shopify data had not yet been redacted. Foundation accepted responsibility for retaining data it believed was gone.
  • Max argues that customers should share as little personal information as possible, even while expecting companies to protect data they collect. He recommends using a P.O. box or buying in person when practical, rather than giving vendors a home address.
  • Q and A recommends Have I Been Pwned to check whether an email appears in known breaches, while noting it only checks email addresses. For changing contact details, he suggests listing accounts, using carrier forwarding where available, and updating services directly.
  • Max says Chainalysis disclosed that an outside attacker accessed user IDs, names, email addresses, and organization roles, then later found that usernames, password hashes, and live tokens were exposed. Its screening products went offline temporarily; the company said investigation content was not accessed.
  • Max says Bull Bitcoin made Payjoin the default for on-chain buys and sells through its wallet exchange. Payjoin breaks the assumption that every transaction input belongs to one sender, though the exchange still knows the transaction and a first purchase into an empty wallet cannot use it.

Safety (3)

  • Q and A says companies must test their systems as attackers would and check how connected software can be exploited together. Foundation is reviewing old software and considering less self-hosting, since running more code itself also increased maintenance and attack exposure.
  • Max says a 23-year-old crypto holder in France, targeted for a second time since 2022, was sentenced after firing at attempted kidnappers who were fleeing his father’s home. Max condemns the sentence and warns that public displays of wealth can expose holders to physical attacks.
  • Max reports that Russian police arrested five men accused of holding a programmer in a garage for five hours and forcing him to send 10.4 BTC. The attackers allegedly chose him after seeing luxury cars in his social-media photos.

Custody (4)

  • Max and Q and A favor separating Bitcoin activity from experimental AI use. Max suggests keeping Sparrow and a Bitcoin node off an AI-running computer; Q and A prefers a dedicated Bitcoin device and isolating AI access to other personal data.
  • Q and A says meeting Bitcoin builders at BTC Amsterdam eased his pessimism; he gave a talk on human-authority hardware. Max argues continued work matters because Bitcoin tools can help people resist growing financial control and leave more freedom to their children.
  • Max says Cake Wallet 6.5.3 adds Bluetooth support for the BitBox02 Nova on iPhone and iPad, including a pairing-code check, and adds BTC Map support.
  • Max says Liana 16 makes Taproot the installer’s recommended default, changes encrypted descriptor backups to BIP-138 format, and adds a privacy mode. The upgrade migrates the wallet database irreversibly, so users must back up the descriptor before updating.

Lightning (3)

  • Max reports that the LNbits team told operators to shut down after attacks on its paywall extension, then took hosted my.lnbits.com offline. BitTipBot reported 2.2 million sats withdrawn; LNbits said patches would follow, but no official release was available.
  • Max says Electrum 4.8.4 drops incoming onion messages to prevent malformed messages from disconnecting Lightning peers, rejects channel announcements with identical node IDs, and fixes restoration of older seeds. He urges users to install the security release.
  • Max says Core Lightning 26.06.10 fixes reported vulnerabilities involving dual funding, splicing, and peer signature checks. He urges node operators to update and avoid keeping more funds hot than necessary.

Payments (1)

  • Max says attackers exploited an older BTCPay Server vulnerability to drain hot wallets; servers on version 2.4.2 or later were unaffected, as were wallets whose keys stayed off-server. He advises taking outdated servers offline and keeping only necessary funds hot.

Regulation (1)

  • Max says FinCEN and the Federal Reserve withdrew a proposal to lower the cross-border travel-rule recordkeeping threshold and explicitly include crypto. The existing $3,000 threshold remains; Coin Center also noted earlier hosted-wallet and mixing proposals had been dropped.

Banking (1)

  • Max says ZachXBT flagged about $133 million stolen from French bank Crédit Mutuel Arkéa; the bank later said attackers compromised a service provider, wired money through bank accounts, then converted it to crypto. Max speculates some crypto hacks could be state-sponsored efforts to promote regulation and centrally controlled stablecoins.

Energy (2)

  • A listener pointed to Edison Motors’ diesel-electric trucks, which use available parts and are described as having electric operation with diesel range for remote areas. Max said he was unfamiliar with the design and did not endorse the claim.
  • Max preferred a new analog, manual Porsche over a Tesla, describing it as a higher-end model above the 911 and saying he expected a flat-eight engine. The discussion contrasted its simple, low-screen interior with newer tech-heavy cars.

Google Wants to Custody Banks' Bitcoin. Brazil Shows Why You Hold Your Own | Rabbit Hole Recap 427 • Nov 7

  • Marty Bent details the $6.3 billion Binance heist, where North Korean hackers exploited a DevOps engineer and leveraged Ethereum EIP-7702 to siphon hot wallet keys. Tether and Circle froze stolen funds, leaving Binance to cover remaining losses.
Also discussed on this episode: (11)

BTC Markets (1)

  • Marty Bent reviews Bitcoin network metrics as the asset trades around $75,420 with a $1.52 trillion market cap. The network approaches its next difficulty adjustment with an estimated 3.3% downward revision.

Elections (1)

  • Thomas Pacquia argues the midterm elections signaled a broad voter rejection of current economic policies, predicting intensified data center and mining moratoriums under incoming Democratic leaders like Elizabeth Warren on Senate Banking.

Banking (1)

  • Marty Bent highlights systemic fragility across international banking, noting Paraguay's Ueno Bank shutdown triggered civil unrest and executive resignations. These incidents underscore the structural necessity of multi-signature Bitcoin self-custody over centralized financial entities.

Open Source (2)

  • Developer Calle warned of rising burnout among open-source Bitcoin maintainers facing immense pressure from managing monetary software. Marty Bent stresses the urgency of supporting developer grants and independent security initiatives to sustain the protocol ecosystem long term.
  • Marty Bent warns BTC Pay Server users that version 2.4.1 and earlier contain an unpatchable zero-day vulnerability. Operators must deploy completely fresh servers rather than applying software updates to secure their payment infrastructure.

Regulation (1)

  • Marty Bent and Thomas Pacquia expect World Liberty Financial to draw heavy Congressional subpoenas once Democrats assume key committee chairmanships. They argue the project created an avoidable political target for crypto opposition.

Privacy (1)

  • Marty Bent announces Bull Bitcoin implemented PayJoin for exchange deposits and withdrawals to break common-input ownership heuristics. The company is simultaneously taking legal action against French authorities to contest invasive KYC and AML regulations.

Europe (1)

  • Thomas Pacquia identifies France as a potential catalyst for European economic instability due to unsustainable debt burdens, strict regulatory friction around technology, and an inability to independently print fiat currency to relieve fiscal deficits.

Labor (1)

  • Marty Bent criticizes Pennsylvania Governor Josh Shapiro's proposed minimum wage increase, citing Thomas Sowell to argue that price floors create unemployment and compound cost-of-living pressures driven primarily by central bank inflation.

Stablecoins (1)

  • Samsung plans to deploy USDC stablecoin wallets across 82 million Galaxy mobile devices for cross-border payment rails. Thomas Pacquia notes this expands user familiarity with digital assets, though without self-custody guarantees.

Physics (1)

  • Physical Superintelligence published a machine-verified proof of the Aaronson-Banas conjecture using the Lean language. Marty Bent notes the finding establishes mathematical limits showing quantum computers offer only polynomial speedups over classical computing under general conditions.