DPRK Rejects U.S. Attribution for Record Binance Heist

47 minutes ago

3 min read

The Democratic People’s Republic of Korea has rejected Washington’s claim that a state-backed hacking unit stole more than $6 billion from Binance, turning the largest suspected cryptocurrency theft on record into a direct political confrontation between Pyongyang and the United States.

In a statement carried by the Korean Central News Agency early Tuesday in Seoul, Workers’ Party official Kim Yo Jong called the FBI’s attribution “absurd rhetoric” and accused Washington of using the exchange breach to brand the DPRK a criminal state. Reuters reported the remarks at 22:11 UTC on November 2, marking Pyongyang’s first public response to the allegation.

Kim described the charge as a “grave political provocation.” Her statement did not offer an alternative account of who carried out the intrusion, but it squarely denied the American claim and framed it as part of a broader campaign of hostility toward the country.

The FBI made its accusation on October 31. It said a group it calls TraderTraitor stole more than $6 billion in virtual assets from Binance on or about October 29 and had begun converting part of the haul into Ether. The agency urged exchanges, blockchain operators and analytics companies to block transactions connected to addresses it identified.

That statement carries the authority of the United States’ principal federal investigative agency, but the public notice does not lay out the technical evidence behind its attribution. It states a conclusion, names the alleged unit and publishes wallet addresses. That distinction matters: Washington’s accusation is official, but an accusation is not the same thing as a publicly demonstrated chain of proof.

Independent blockchain firms have reached a similar judgment. The Associated Press reported that TRM Labs and Chainalysis linked the attack to TraderTraitor, citing transaction patterns and similarities with earlier thefts attributed to the group. TRM said the attackers moved roughly $6.36 billion across ten blockchains, much of it in about 20 minutes.

Binance has confirmed the scale of the breach without publicly identifying the perpetrators. The exchange said its investigation found evidence of a compromised employee laptop and additional points of intrusion, while finding no evidence that private wallet keys were stolen. It estimated the loss at about $6.3 billion and said roughly $3 billion had been frozen on-chain.

Richard Teng speaking at Binance Blockchain Week in Istanbul in 2023 — FILE — Richard Teng, then Binance’s head of regional markets, speaks at Binance Blockchain Week in Istanbul on November 9, 2023. Photo: Binance / Wikimedia Commons, CC BY 4.0.

Photo credit, source and licence: Binance via Wikimedia Commons · CC BY 4.0.

The company has pledged to absorb the losses through its Secure Asset Fund for Users and corporate funds. That commitment and the restoration of withdrawals limit the immediate burden on account holders, but they do not erase the structural failure: attackers reached a hot wallet connected to the internet and moved assets at a speed that overwhelmed ordinary controls.

The confrontation now runs on two tracks. Investigators and blockchain companies will try to freeze and trace the remaining assets. Governments will use their conclusions in a much wider contest over sanctions, weapons financing, cybersecurity and diplomatic leverage on the Korean Peninsula.

That second track raises the stakes. U.S. officials have long accused the DPRK of using cryptocurrency theft to secure foreign currency under sanctions. Pyongyang has consistently denied involvement in cybercrime and argues that Washington uses such allegations to justify pressure against its sovereignty and security policy.

Neither side’s political interest settles the technical question. The FBI’s confidence deserves scrutiny, not automatic acceptance. The DPRK’s denial also deserves accurate reporting, not automatic exoneration. The decisive evidence will lie in the intrusion record, the movement of the assets and any verifiable link between the operators and a state command structure.

For now, three facts stand. Binance lost about $6.3 billion in an extraordinary breach. U.S. authorities and two private analytics firms attribute the operation to TraderTraitor. The DPRK rejects that attribution as politically motivated. Everything beyond those established positions requires evidence that the public has not yet seen.