North Korea Rejects Claims of $6.3 bn Binance Hack

North Korea has denied allegations that it orchestrated the record-setting $6.3 bn (£4.7 bn) hack of cryptocurrency exchange Binance, labeling the claims as “absurd rhetoric” and a “sinister attempt” by the United States to tarnish the country’s image. The statement, issued by Kim Yo-jong, the sister of leader Kim Jong Un and director of the General Affairs Department, comes as the FBI, the Secret Service and a range of cyber analysts continue to point to North Korea as the culprit.

The United States’ investigation has identified the state-backed hacking unit TraderTraitor, also known as the Lazarus Group, as the group that carried out the attack. The FBI has urged industry partners to block transactions linked to accounts associated with the group, underscoring the perceived threat that the unit poses to global financial infrastructure. In a statement, Kim Yo-jong dismissed the allegations as “a grave political provocation” and reiterated the DPRK’s policy of opposing “all sorts of malicious acts in cyberspace.”

Binance’s own explanation of the breach points to a compromised engineer’s laptop that enabled an attacker to make unauthorised withdrawals. The exchange has since resumed trading after working with issuers to freeze assets affected by the hack. Binance reported that customers had withdrawn more than $3.6 bn of assets as it reopened, and the company has pledged to cover all losses, having already reimbursed roughly 95 % of the stolen funds. The incident remains the largest cyber-attack on a crypto platform in history.

North Korea’s cyber-crime reputation is not new. The same TraderTraitor unit was blamed for a $1.5 bn breach of the crypto exchange Bybit in 2025. Analysts note that Pyongyang has systematically built its cyber operations, recruiting promising university students and channeling them into hacker units overseen by the country’s intelligence agency. Despite repeated accusations, the DPRK has consistently denied involvement in major cyber incidents.

For founders, operators and investors in the crypto space, the Binance hack underscores the fragility of digital asset platforms and the importance of robust security protocols. The incident has prompted calls for tighter regulatory oversight, greater transparency in asset custody, and stronger collaboration between exchanges and law-enforcement agencies. It also highlights the geopolitical dimension of cyber-crime, where state actors can be used as tools for illicit finance and geopolitical leverage.

Looking ahead, the fallout from the Binance breach may accelerate the push for industry-wide security standards and more stringent compliance frameworks. Exchanges will likely face increased pressure to demonstrate resilience against sophisticated, state-backed threats. Meanwhile, governments may intensify efforts to attribute and counter cyber-attacks, potentially leading to new international agreements on cyber-crime attribution and response. The incident serves as a stark reminder that the intersection of technology, finance and geopolitics can create high-stakes vulnerabilities that demand coordinated, cross-border solutions.