North Korea has formally denied any role in the record-breaking $6.3 billion theft from cryptocurrency exchange Binance, pushing back against an FBI assessment that blamed Pyongyang for the heist. In a statement issued Tuesday, Kim Yo Jong, the influential sister of North Korean leader Kim Jong Un, dismissed the U.S. accusation as “a trite provocation” and part of a broader pattern of American efforts to “spread misunderstanding” about her country.
Kim, who serves as a senior official in the ruling Workers' Party, used the statement to reject what she called “blindly linking the DPRK with the 'cyber crime' incidents whenever they occur on an international scale.” She insisted that the North Korean government “oppose[s] all sorts of malicious acts in cyberspace” and described the FBI's claim as “a sinister attempt to damage the international image of the DPRK and undermine its dignity and national prestige.”
The denial comes days after Binance detected unusual outflows from its digital wallets, prompting the exchange to suspend all deposits and withdrawals. The breach triggered a wider freeze across the crypto market, with other firms locking down roughly $3 billion in assets to prevent further losses. By Saturday, Binance said it had managed to replenish 90 percent of the stolen funds, but acknowledged the remaining 10 percent consisted of “less liquid” assets that “may take longer to source.” The company also pledged to absorb the financial impact rather than pass it on to users.
President Trump said Friday that his administration was “looking into” the incident, but when asked whether a suspected North Korean hacker group was behind it, he replied, “We don’t know.” The following day, the FBI issued a formal statement attributing the attack to North Korea, specifically pointing to a cybercrime outfit known as TraderTraitor. Blockchain intelligence firms TRM Labs and Chainalysis had earlier flagged TraderTraitor as the likely culprit, noting similarities to previous attacks, including the $1.5 billion theft from crypto exchange Bybit last year.
The FBI said it “has observed TraderTraitor actors converting stolen assets primarily into Ether (ETH),” and that the funds are likely to be laundered further using decentralized finance (DeFi) services and instant swap tools. This modus operandi matches earlier North Korea-linked operations, according to analysts.
The diplomatic fallout adds a new layer to an already tense relationship. The U.S. has repeatedly accused North Korea of using cybercrime to fund its weapons programs, while Pyongyang has consistently denied such allegations. This latest exchange underscores the growing importance of cryptocurrency as a flashpoint in international security, as record-breaking heists become more frequent and sophisticated.
Meanwhile, the political reverberations are being felt in Washington. Some lawmakers have called for stricter oversight of crypto exchanges, while others have questioned the administration's response. The president's initial uncertainty about the North Korean link drew criticism from Democrats, who argued it showed a lack of resolve in confronting Pyongyang. The administration has since backed the FBI's assessment, but the episode has reignited debate over how to deter state-sponsored cyber theft.
For now, Binance is working to restore normal operations, but the incident has raised broader concerns about the security of digital assets and the ability of nation-states to exploit vulnerabilities. As the investigation continues, the international community will be watching to see whether the U.S. will impose new sanctions or take other actions against North Korea in response to the alleged hack.
