Table of Contents
North Korea has rejected allegations that it orchestrated a record $6.3bn cryptocurrency exchange hack involving Binance, dismissing the claims as absurd rhetoric. Kim Yo Jong, a senior government official and sister of leader Kim Jong Un, stated on Tuesday that the accusations represent a sinister attempt by the United States to tarnish Pyongyang’s reputation.
US Accusations and Investigation
The US Federal Bureau of Investigation, the Secret Service, and various cyber analysts have attributed the massive security breach to North Korea. This incident marks the largest cyber-heist in history and adds to a growing list of digital attacks linked to the country, which allegedly uses cyber-crime to support its sanctioned economy.
Investigators and blockchain analysis firms have identified the state-backed hacking group TraderTraitor as the primary perpetrator of the attack. In response, the FBI has urged industry partners to assist in blocking transactions tied to cryptocurrency accounts associated with the group.
In her official statement, Kim Yo Jong, serving as the director of North Korea’s General Affairs Department, accused Washington of repeating tired provocations. She described the allegations as a grave political provocation intended to mislead international public opinion by blaming Pyongyang for global cyber crimes.
History of Cyber Operations
Despite persistent denials from Pyongyang, international researchers have frequently blamed the nation for major digital breaches in recent years. The TraderTraitor collective, frequently referred to as the Lazarus Group, was previously held responsible for a $1.5bn hack targeting the Bybit crypto exchange in 2025.
Research organizations, including the S Rajaratnam School of International Studies think tank, note that North Korea systematically develops its cyber warfare capabilities by identifying talented students and assigning them to specialized hacker units managed by national intelligence agencies. Kim Yo Jong reiterated that opposing malicious cyber activities remains a consistent policy stance of the government.
Binance Response and User Withdrawals
Following the breach, Binance focused its public communications on technical details and user protection measures. Initial investigations suggest that an unauthorized attacker gained access and made illicit withdrawals after compromising an engineer’s laptop.
The platform resumed trading for major cryptocurrencies after collaborating with asset issuers to freeze stolen funds. However, data released on Sunday indicated that customers withdrew over $3.6bn in assets as trading recommenced following the temporary suspension of transactions.
Binance has consistently promised to reimburse all losses stemming from the security incident, reporting that it has already restored approximately 95% of the stolen assets.
