North Korean officials reject US accusations over $6.3 billion Binance breach

The United States Federal Bureau of Investigation, the Secret Service and several blockchain‑analysis firms have attributed the $6.3 billion theft from cryptocurrency exchange Binance to a North Korean‑linked hacking unit known as TraderTraitor, also identified as the Lazarus Group. The agencies say the group used sophisticated techniques to move the stolen digital assets across multiple wallets, marking the incident as the largest crypto hack on record.

In response, Kim Yo‑jong, director of North Korea’s General Affairs Department and sister of leader Kim Jong Un, issued a statement denying any involvement. She described the accusations as "absurd rhetoric" and a "sinister attempt" by the United States to tarnish the DPRK’s international image, calling the claims a "grave political provocation" that misleads public opinion.

The FBI has urged cryptocurrency platforms and industry partners to block transactions linked to the TraderTraitor addresses, emphasizing the need for coordinated action to prevent further laundering of the stolen funds. Analysts note that the group has previously been blamed for other high‑value crypto breaches, including a $1.5 billion hack of the Bybit exchange in 2025.

North Korean officials have consistently denied responsibility for major cyber‑attacks, despite repeated attributions by Western security agencies. Researchers from the S. Rajaratnam School of International Studies have described Pyongyang’s cyber programme as a state‑directed effort that recruits university students for specialized hacking units overseen by the country’s intelligence services.

The dispute highlights ongoing tensions between the United States and North Korea over cyber‑security accusations, with both sides presenting starkly different narratives about the origins and motivations of the Binance breach.