Thursday and Friday brought a court order locking down North Korean theft proceeds, a federal suit against a state attorney general, a seven-percent drawdown in bitcoin, and a chain freezing its own staking exits.
The DOJ Locks Down $1.2 Billion in North Korean Proceeds
On November 12 the Justice Department announced court authorization to seize or restrain more than $1.2 billion traced to the October 29 theft of over $6 billion from Binance, which the FBI attributes to North Korean military hackers it tracks as TraderTraitor. About $2.7 billion has been frozen. The same announcement disclosed the takedown of infrastructure behind FaceStealer, which took roughly $400 million over 18 months by luring crypto professionals into video meetings and serving them deepfaked footage of people they knew.
Restraint is not restitution. A seizure order moves assets into government custody and stops the laundering; it pays no one back. Victims recover, if at all, through remission petitions that run months behind the press release and turn on proof of ownership the victim supplies.
The Federal Government Sues a State Over Prediction Markets
Also on November 12, the DOJ and CFTC sued the State of Arkansas and Attorney General Tim Griffin in the Eastern District of Arkansas. Kalshi is not a defendant; the state is. The government argues event contracts on a designated contract market are swaps under the Commodity Exchange Act, that CFTC jurisdiction is exclusive, and that Arkansas is preempted from applying its gambling statutes. Louisiana sued Kalshi, Polymarket and others the same day and won a ten-day restraining order.
The requested injunction reaches affiliates and business partners of registered markets. Polymarket is a named defendant in Louisiana, which also touches entities tied to Robinhood and Coinbase. A preemption ruling here becomes a template for defending federally registered crypto venues; a loss invites fifty licensing fights.
Bitcoin Breaks $69,000 as $1.47 Billion in Leverage Unwinds
Bitcoin traded near $68,400 on Friday, its lowest since August and down about 7% on the day, while ether fell to roughly $1,920. CoinGlass counted $1.47 billion in 24-hour liquidations across more than 175,000 accounts, 89% of them longs. Spot bitcoin ETFs took about $300 million in net outflows on November 11.
Cascades this fast generate disputes: outages during the move, oracle prints diverging from spot, margin calls executed out of sequence. Those claims live or die on contemporaneous evidence, and exchange agreements impose short notice windows and compel arbitration.
MANTRA Freezes Unbonding After Attackers Unstake Other People's Tokens
MANTRA suspended all unbonding transactions on its chain for seven days after attackers holding keys exposed by the Web3Auth flaw in Keplr’s social-login wallets began force-unstaking users’ OM without consent. It had already frozen several attacker addresses through Governance Proposal No. 41, and is urging users to re-delegate before the eight-day unbonding window closes.
A validator set voting to freeze addresses is asset restraint without a court, done in hours by people with no subpoena power and no duty to hear the other side. It helps victims here, and it is awkward for projects marketed as censorship-resistant. Expect regulators and counterparties to ask what constrains that power.
How to Protect Yourself
Treat an unexpected video call as an attack surface. FaceStealer worked because the face was familiar and the request to install something sounded like troubleshooting; never install software prompted during a meeting. Social-login wallets deserve a second look after Web3Auth, because that convenience means someone else’s infrastructure helps derive your key. And monitor staking delegations rather than setting and forgetting them.
If you are hit, speed decides the outcome. Collect transaction hashes, timestamps and account records immediately, report to the platform and to the FBI’s IC3, and notify any exchange where the funds landed, because freezes happen in hours and rarely after. Claim windows and limitations periods generally run from discovery, so time spent deciding whether to pursue a claim is often what ends it.
At Coin Counsel, we work with individuals and businesses navigating the legal fallout of crypto fraud — whether you're a victim seeking recovery, a company facing regulatory scrutiny, or a project working to stay compliant in an increasingly complex legal landscape. The rules are evolving fast, and the cost of getting it wrong has never been higher. Contact us at coin-counsel.com to speak with a crypto-focused attorney today.
Disclaimer
This blog post is for informational purposes only and does not constitute legal advice. Reading this content does not create an attorney-client relationship between you and Coin Counsel or Franco Law PLLC. The legal landscape surrounding cryptocurrency is rapidly evolving and varies by jurisdiction. Do not act or refrain from acting based on information in this post without first consulting a qualified attorney. If you believe you have been the victim of crypto fraud, contact us at coin-counsel.com for a consultation.
