North Korea has rejected allegations linking it to the record USD 6.3 billion cryptocurrency theft from Binance, describing US accusations as politically motivated. The denial follows claims by the Federal Bureau of Investigation (FBI) that state-backed hackers orchestrated one of history's largest financial cyberattacks.
Kim Yo Jong, sister of North Korean leader Kim Jong Un, dismissed Washington's allegations on Tuesday, accusing US authorities of attempting to damage Pyongyang's international reputation. “The US assertion is absurd rhetoric and nothing new,” she said, rejecting claims connecting North Korea to the cryptocurrency breach.
“It is a grave political provocation against the DPRK that the US misleads international public opinion as if all the cybercrimes in different parts of the world are our deeds,” Kim added. North Korea has consistently denied involvement in international cryptocurrency theft and cybercriminal operations.
FBI confirmed the attack was conducted by TraderTraitor, a North Korean hacking operation associated with the Lazarus Group. The same network was previously blamed for stealing approximately USD 1.5 billion from cryptocurrency exchange Bybit in February 2025.
Investigators believe the attackers converted stolen cryptocurrency into Ethereum and could subsequently move assets through decentralized finance platforms and instant-swap services. According to blockchain analytics firm Elliptic, cryptocurrency theft attributed to North Korea reached approximately USD 7.6 billion during 2026.
Binance experienced substantial customer withdrawals after restarting cryptocurrency trading and transfers following the security breach. Data published by Binance on Tuesday shows that net withdrawals reached USD 5.27 billion after operations resumed on Sunday.
The exchange reported that transaction activity subsequently stabilized and approximately 95% of stolen customer assets had been covered. Initial investigations suggested that a compromised engineer's laptop enabled attackers to initiate unauthorized cryptocurrency withdrawals.
The incident has renewed international scrutiny of cryptocurrency exchanges and state-sponsored cybercrime. Cybersecurity analysts suggest that North Korean hacking operations are increasingly targeting digital assets, potentially generating revenue despite international sanctions.
The Binance breach highlights vulnerabilities in centralized cryptocurrency infrastructure and underscores the importance of stronger wallet security, transaction monitoring, and international cooperation against sophisticated cyberattacks.
Also Read: Binance Users Withdraw USD 3.64 Billion Following Record Cryptocurrency Hack