North Korea has denied involvement in a US$6.3 billion cryptocurrency theft from Binance, rejecting allegations by the Federal Bureau of Investigation (FBI) that a state-backed hacking group carried out the attack. The denial, issued on November 3, 2026, comes as the world's largest cryptocurrency exchange manages customer withdrawals and efforts to recover stolen assets.
Kim Yo Jong, the influential sister of North Korean leader Kim Jong Un, described Washington's allegations as "absurd rhetoric" in a statement carried by state news agency KCNA. She accused the United States of attempting to portray North Korea as a cybercrime state and said the allegations were politically motivated.
The FBI said members of TraderTraitor, a hacking group it links to North Korea, were responsible for the theft. Investigators reportedly traced the movement of stolen cryptocurrency as the attackers converted assets into Ethereum and moved them through different wallets.
Binance has described the incident as potentially the largest cryptocurrency theft on record. The attack has triggered concerns among customers, with Reuters reporting that users had withdrawn a net US$4.72 billion by Monday following the incident.
The exchange has been working to restore confidence by making more assets available for withdrawals and launching a campaign to attract and retain customers. Binance has also said it covered most of the stolen assets using company funds.
The incident has renewed scrutiny of North Korea's alleged use of cryptocurrency theft to generate foreign currency and finance activities restricted by international sanctions. Cybersecurity analysts have repeatedly linked North Korean hacking operations to major cryptocurrency thefts, although Pyongyang denies involvement.
The scale of the Binance incident has also raised questions about security controls across digital asset platforms, particularly the protection of customer funds and the ability to respond to large-scale attacks.
For cryptocurrency investors, the immediate concern is whether exchanges can protect assets and maintain access to funds during major security incidents. Investigators are expected to continue tracing the stolen cryptocurrency, while Binance faces pressure to demonstrate that its recovery measures can protect customers.
