North Korean officials have dismissed U.S. allegations that a state‑backed hacking group was responsible for the record‑size $6.3 billion cyberattack on cryptocurrency exchange Binance. In a statement, Kim Yo‑jong, director of the DPRK’s General Affairs Department and sister of leader Kim Jong Un, called the accusation a “sinister attempt” by the United States to tarnish Pyongyang’s image.
Accusations and North Korean Response
U.S. law‑enforcement agencies, including the Federal Bureau of Investigation and the Secret Service, together with blockchain analysts, have publicly linked the hack to a North Korean‑run group known as TraderTraitor. The FBI has urged industry partners to block transactions tied to cryptocurrency accounts associated with the group. In response, Kim Yo‑jong described the U.S. claim as a “grave political provocation” and asserted that the DPRK consistently opposes malicious cyber activity.
Kim’s statement reiterated a long‑standing pattern of denial. The North Korean government has repeatedly rejected accusations that it conducts cyber‑crime to fund its sanctioned economy. Analysts from the S Rajatnam School of International Studies note that Pyongyang has systematically built cyber capabilities, recruiting promising university students and assigning them to hacker units overseen by its intelligence agency.
Binance’s Response and Ongoing Recovery
Binance, the world’s largest crypto exchange, has focused its public comments on the technical aspects of the breach. The company said an engineer’s laptop was compromised, allowing attackers to make unauthorized withdrawals. After the incident, Binance worked with cryptocurrency issuers to freeze assets linked to the hack and resumed trading in major digital currencies.
According to data released by Binance on Tuesday, a net $5.27 billion has been withdrawn from the platform since trading resumed on Sunday, and transaction volumes have now stabilised. Binance has repeatedly pledged to cover all losses arising from the attack and reported that it has already compensated roughly 95 % of the stolen assets.
Broader Context of North Korean Cyber Activities
The alleged involvement of TraderTraitor fits a broader narrative in which North Korea is accused of leveraging cyber‑crime to circumvent international sanctions. While the United States and various cybersecurity firms have attributed several high‑profile attacks to the regime, Pyongyang consistently denies any official role, emphasizing a policy of opposing “malicious acts in cyberspace.”
As investigations continue, the FBI’s call for industry cooperation aims to limit the flow of illicit cryptocurrency tied to the alleged state‑backed group. Meanwhile, Binance’s efforts to reimburse users and stabilise its platform underscore the growing financial stakes of large‑scale crypto breaches.
Mitchell Landsberg is a Senior Technology Correspondent at News Raise. He covers consumer electronics, artificial intelligence, software developments, and digital privacy trends.
