North Korea has denied US allegations that its hackers were responsible for a reported $6.3 billion cryptocurrency theft involving Binance, according to a statement carried by the Korean Central News Agency.
Kim Yo Jong, the sister of North Korean leader Kim Jong Un, dismissed the FBI’s attribution of the attack to a hacking operation linked to Pyongyang. She accused Washington of repeatedly associating North Korea with major cybercrime incidents and described the allegations as a political provocation intended to damage the country’s international reputation.
North Korea’s denial does not independently establish who carried out the attack, and its suggestion that the United States could be involved was not supported by evidence.
FBI attributes attack to TraderTraitor
The denial follows an FBI announcement attributing the Binance incident to TraderTraitor, a hacking operation that US authorities associate with North Korea. The bureau identified cryptocurrency addresses connected to the stolen assets and urged exchanges and other digital asset services to block transactions involving those wallets.
Blockchain intelligence firms have also pointed to links between the incident and previous North Korean-linked attacks. Investigators cited similarities in transaction preparation and fund movements, although the complete forensic evidence has not been publicly disclosed.
North Korea has repeatedly rejected accusations linking its government to cryptocurrency thefts. US authorities and cybersecurity researchers have long alleged that North Korean-linked cyber operations generate revenue that helps the country evade international sanctions.
Kim questions possible US role
Kim also questioned who would ultimately benefit if authorities recovered the stolen cryptocurrency, suggesting that the destination of recovered funds could provide clues about the attackers’ identity. She did not provide evidence connecting Washington to the breach.
The comments add a political dimension to an investigation that remains focused on tracing the stolen assets and identifying those responsible. The dispute also revives tensions surrounding the February 2025 Bybit hack, which US authorities attributed to North Korean-linked hackers. Pyongyang has rejected those accusations as well.
Binance investigation continues
The incident has intensified scrutiny of cryptocurrency exchange security and the challenges of recovering assets once stolen funds move across multiple blockchain networks.
Investigators are tracking transactions associated with the suspected attackers, while exchanges and blockchain service providers have been urged to identify and restrict transfers involving flagged addresses.
For Binance, the priority remains tracing the stolen cryptocurrency, addressing the security breach, and maintaining user confidence. The competing claims from Washington and Pyongyang have not resolved the central question of responsibility, leaving investigators’ findings and any additional forensic disclosures in focus.
