North Korea refutes claims of involvement in the $6.3 billion Binance cyber heist, hints at US role

North Korea Responds to FBI Allegations

In a recent statement, Kim Yo Jong, the sister of North Korean leader Kim Jong Un, vehemently dismissed allegations made by the FBI that link North Korea to the massive $6.3 billion hack of the cryptocurrency exchange Binance. According to the Korean Central News Agency (KCNA), Kim characterized these allegations as politically motivated attacks aimed at tarnishing North Korea's image on the global stage.

Claims of Cyber Criminality

Kim asserted that the FBI's claims of a North Korean-affiliated hacking organization being responsible for the cyber theft are unfounded and part of a larger narrative to label the Democratic People's Republic of Korea (DPRK) as a 'cyber criminal state.' She articulated that such accusations have been previously utilized by the US whenever there are cyber incidents of this nature, intending to mislead the international community about North Korea's role.

Additional Hacking Incidents

The FBI also implicated North Korea in a separate hacking incident involving the cryptocurrency exchange Bybit in February 2025, worth $1.5 billion. Kim rejected this assertion as well, stating that it fits a recurring pattern of US misinformation regarding North Korea's involvement in cyber crimes. She went further to suggest that examining the beneficiaries of the stolen cryptocurrency could provide insights into the true perpetrators of the Binance hack, although she did not present any concrete evidence to support this claim.

Blockchain Analysis and Findings

Amid these tensions, blockchain analysis firm TRM Labs recently attributed the Binance breach to a North Korean group named TraderTraitor, based on both on-chain and off-chain intelligence. They noted distinct operational patterns reminiscent of previous North Korean cyber attacks, including strategic preparations and the usage of services like Tornado Cash for laundering the stolen assets. Other platforms, like Chainalysis and ZachXBT, have echoed these findings, highlighting connections between different hacking incidents involving North Korean actors.

Methodical Approach to Cyber Crimes

ZachXBT's analysis suggested that funds from both the Binance and Bitget hacks had been funneled through a common address, indicating a methodical approach to executing these digital crimes. Such findings coincide with statements made by Bitget CEO Gracy Chen during the preliminary investigations, where he pointed to VPN technology associated with groups linked to North Korea as a factor in their ongoing cybersecurity challenges.

Conclusion

The unfolding situation reflects the complicated dynamics between the US and North Korea, particularly in the domain of cybersecurity, where accusations and defenses seem to play out as part of broader political strategies. This latest exchange is emblematic of the ongoing mistrust and volatility surrounding North Korea's international behavior, particularly as it pertains to its alleged cyber activities in the ever-evolving world of digital currencies.