North Korea has rejected allegations that it was responsible for the $6.3 billion cryptocurrency theft from Binance, escalating the dispute over one of the largest reported digital asset security breaches. Kim Yo Jong, the sister of North Korean leader Kim Jong Un, dismissed the United States accusations as “absurd rhetoric” and a “grave political provocation” in a statement carried by state news agency KCNA on November 3.
Her response followed an announcement by the Federal Bureau of Investigation (FBI) attributing the October 29 attack to TraderTraitor, a hacking operation linked to North Korea. The FBI said its investigation identified North Korea as responsible for stealing more than $6 billion in virtual assets from Binance, the world’s largest cryptocurrency exchange by trading volume.
Kim Yo Jong accused Washington of attempting to portray North Korea as responsible for cybercrime around the world. She argued that the allegations reflected what Pyongyang considers a hostile US policy and said the accusations were intended to damage the country’s international reputation.
The denial introduces another dimension to the Binance incident, which has already triggered security investigations, asset-tracing efforts and concerns across cryptocurrency markets. However, North Korea’s rejection does not resolve the question of responsibility. The FBI has publicly maintained its attribution, while the available public information does not independently establish every detail of the investigation.
FBI Identifies TraderTraitor as the Group Behind the Binance Attack
In its October 31 announcement, the FBI identified TraderTraitor as the North Korean malicious cyber operation responsible for the theft. The agency said investigators had observed the attackers converting the stolen assets primarily into Ethereum (ETH), with further laundering expected through decentralized finance platforms and instant cryptocurrency swap services.
The FBI also issued a warning to cryptocurrency businesses and infrastructure providers, urging them to block transactions involving addresses connected to the stolen funds. Its request specifically covered DeFi services, instant exchanges, blockchain analytics companies, RPC node operators and other virtual asset service providers.
Related: How the Binance Hack Happened: What the $6.3 Billion Crypto Heist Reveals About Exchange Security
The strategy reflects the challenges involved in recovering cryptocurrency after a major breach. Once stolen assets move between wallets, blockchains and conversion services, investigators must trace the transactions and identify platforms that may be able to restrict or flag the funds. The FBI published associated cryptocurrency addresses to help industry participants identify transactions connected to the operation.
TraderTraitor has previously been associated with major cryptocurrency thefts. The group was also blamed by US authorities for the February 2025 Bybit breach, in which approximately $1.5 billion in digital assets was stolen. That incident demonstrated the scale of financial damage that sophisticated attackers can cause even when major exchanges maintain extensive security infrastructure.
Binance Hack Raises Wider Questions About Crypto Security
The Binance breach has also renewed scrutiny of how cryptocurrency exchanges protect their internal systems, wallets and operational infrastructure. The exchange has said it covered most of the affected assets using company funds, while the FBI’s investigation has focused on tracing the stolen cryptocurrency and preventing further movement through service providers.
North Korea’s denial comes amid a wider history of accusations linking state-affiliated hacking groups to cryptocurrency theft. International authorities and cybersecurity researchers have repeatedly attributed major digital asset attacks to North Korean-linked operators, although Pyongyang has generally rejected allegations of involvement in cybercrime.
The latest dispute also carries diplomatic implications. According to reporting on Kim Yo Jong’s statement, she warned that North Korea had issues to reconsider in response to what it described as Washington’s hostile attitude. The comments arrive as diplomatic engagement between the two countries remains uncertain.
Related: Binance Reopens Withdrawals: $3.64 Billion Exits, but Is It a Sign of Panic?
For cryptocurrency users and exchanges, the immediate priority remains the movement of the stolen funds rather than the political exchange. The FBI’s attribution, North Korea’s denial and Binance’s recovery efforts are separate developments that will need to be assessed as more evidence emerges.
The case highlights how cryptocurrency theft can extend beyond blockchain security into international law enforcement and geopolitical disputes. Whether the stolen assets can be recovered will depend heavily on transaction tracing, cooperation from service providers and the ability to prevent the attackers from converting the funds into assets that are harder to track.
About The Author
