Key Takeaways
- Kim Yo Jong dismissed FBI accusations linking North Korea to the $6.3 billion Binance breach.
- The regime official described U.S. allegations as a “grave political provocation” targeting the country.
- Federal investigators attributed the October 29 attack to TraderTraitor, a hacking collective with North Korean ties.
- Blockchain analytics firm Elliptic tracked the stolen cryptocurrency through approximately 12,000 digital wallets spanning 11 different blockchains.
- The exchange has replenished roughly 95% of customer funds and begun resuming withdrawal services.
The Democratic People’s Republic of Korea has firmly rejected allegations tying it to the massive $6.3 billion cryptocurrency heist targeting Binance, the world’s premier digital asset exchange. Kim Yo Jong, sister to supreme leader Kim Jong Un, characterized the FBI’s attribution as a “grave political provocation” directed at her nation.
State media outlet Korean Central News Agency (KCNA) published her remarks on Tuesday, November 3. The statement arrived several days after federal law enforcement officials identified a North Korea-affiliated hacking operation as responsible for the October 29 security breach.
Pyongyang Official Disputes U.S. Attribution
Kim accused the FBI of attempting to portray North Korea as a “cyber criminal state.” She challenged the bureau’s assertion that a hacking organization “supported” by the Pyongyang government executed the attack.
“It is a grave political provocation against the DPRK that the U.S. misleads the international public opinion as if all the cyber crimes in different parts of the world are our deeds,” she declared. The acronym DPRK refers to the Democratic People’s Republic of Korea, the nation’s formal designation.
Describing the allegation as a “sinister” campaign to undermine North Korea’s reputation and national standing, Kim characterized it as an infringement on the country’s digital sovereignty.
While North Korea has faced previous accusations of cryptocurrency theft and consistently denied such claims, public statements from Kim regarding hacking incidents are uncommon.
The senior official also referenced American intentions to confiscate stolen digital currencies. She noted that the current U.S. government announced plans last year to seize such assets for inclusion in a strategic reserve.
She hinted that examining whoever ultimately possesses the recovered cryptocurrency “may get a clue about who is behind the hacking incident.” No substantiating evidence for an alternative perpetrator was offered.
Kim warned that North Korea is “closely monitoring” what she termed U.S. hostile actions. “We have issues to reconsider in diverse aspects as regards the very unpleasant U.S. hostile attitude,” she stated.
Federal Investigators and Analysts Track Laundered Assets
Federal authorities announced on October 31 that the TraderTraitor organization absconded with over $6 billion in cryptocurrency. This collective has been connected to previous digital asset thefts linked to North Korean state actors.
The bureau collaborated with Secret Service agents and IRS criminal investigators on the investigation. Officials indicated the perpetrators were primarily converting stolen holdings into Ethereum.
Law enforcement cautioned that the illicit funds could migrate through decentralized finance protocols and instantaneous exchange services. Cryptocurrency platforms and financial institutions received requests to block transactions associated with flagged wallet addresses.
Binance’s preliminary investigation suggested that a compromised engineer’s computer may have granted unauthorized access to backend systems. The platform found no indication that wallet private keys were exposed during the intrusion.
On November 2, blockchain intelligence company Elliptic calculated the total theft at $6.43 billion. Analysts mapped the assets’ movement through approximately 12,000 separate wallets and more than 40,000 individual transactions spanning 11 different blockchain networks during the initial four-day period.
A substantial portion of early laundering activity occurred on the Tron network, distributed across roughly 7,700 addresses. The attackers subsequently transferred holdings to Ethereum utilizing cross-chain bridge technology.
According to Elliptic, $786 million worth of stolen stablecoins was exchanged for other cryptocurrencies before issuers could implement freezing measures. An additional $2.85 billion, representing approximately 44% of the total haul, has been either frozen or confiscated.
Around $3.24 billion remains within identified addresses, predominantly held in Bitcoin and Ethereum. Only a minimal fraction appears to have been converted to fiat currency, including roughly 28 Bitcoin routed through mixing services.
The exchange announced it has replenished about 95% of impacted customer balances using corporate reserves. The outstanding portion consists primarily of illiquid tokens with limited trading volume.
Binance’s November 2 proof-of-reserves audit encompassed ten major digital currencies, including Bitcoin, Ethereum, BNB and Solana. Company leadership pledged to absorb all losses internally rather than imposing costs on users.
Withdrawal functionality began returning on November 1, initially for Bitcoin and select tokens on Ethereum and BNB Smart Chain networks. Additional withdrawal capabilities will resume from November 3 onward, contingent on operational and security validations.
Get 3 Free Stock Ebooks
Discover top-performing stocks in AI, Crypto, and Technology with expert analysis.
- Top 10 AI Stocks - Leading AI companies
- Top 10 Crypto Stocks - Blockchain leaders
- Top 10 Tech Stocks - Tech giants
