The U.S. Department of Justice has obtained court authorization to seize or restrain more than $1.2 billion in cryptocurrency taken in last month’s attack on Binance, the largest known crypto theft on record and one the FBI has pinned on a North Korean military-linked hacking unit.

The November 12 announcement marks a new phase in a recovery effort that has already immobilized a much larger sum. U.S. authorities working alongside private-sector firms have frozen more than $2.7 billion of the roughly $6.3 billion stolen on October 29, and the assets covered by the department’s court orders represent a slice of that total rather than an additional recovery.

The FBI attributed the breach to TraderTraitor, a hacking operation tied to the…