Kim Yo Jong calls FBI's Binance hack accusation a 'trite provocation'
North Korean leader Kim Jong Un's sister denied Pyongyang was behind the $6.3bn theft. Blockchain investigators say the evidence still points to North Korean hackers.
North Korea has denied stealing about $6.3bn from the cryptocurrency exchange Binance, with Kim Yo Jong, the powerful sister of leader Kim Jong Un, dismissing the FBI's accusation as "a trite provocation".
In a statement carried by the state news agency KCNA, Kim said the United States had repeatedly tried to blame North Korea for cybercrime. "This is not the first time that the U.S. has attempted to spread misunderstanding of the DPRK in the international community, blindly linking the DPRK with the 'cyber crime' incidents whenever they occur on an international scale," she said.
She called the FBI's claim "absurd rhetoric and nothing new", and accused Washington of trying to brand North Korea a "cyber criminal state". DPRK is the abbreviation of the country's official name, the Democratic People's Republic of Korea.
The FBI's case
The FBI said on Saturday that the theft, the largest crypto heist on record, was carried out by TraderTraitor, a North Korean hacking group. It blamed the same group for the theft of $1.5bn from the exchange Bybit in February 2025.
Investigators stand by the attribution
Blockchain analysis firm Elliptic rejected Kim's denial, saying its own investigation supported the FBI's conclusion. Other firms, including TRM Labs and Chainalysis, had reached the same view.
Elliptic said the hackers were laundering the stolen funds more slowly than after the Bybit hack, when North Korean hackers moved all the stolen ether within ten days.
A political twist
The FBI statement put the White House in an awkward position. President Donald Trump has made repeated overtures to North Korea and said he is open to meeting Kim Jong Un, and after the FBI's statement he cast doubt on North Korea's involvement, according to reports.
Why it matters
United Nations experts have said North Korea uses stolen cryptocurrency to fund its nuclear weapons and missile programmes, making crypto theft a security issue, not just a financial one. Binance has said it has covered most of its customers' losses from its own funds, and about $3bn of the stolen assets have been frozen.
Sources and references
AI disclosure This article was drafted with the help of AI tools and was reviewed, fact-checked and edited by our editors before publication. See our AI policy for details. How we use AI.
Spotted an error? Request a correction. Read our editorial standards.
Related coverage
Binance customers pull $3.6bn as withdrawals reopen after record hack
The exchange says it has covered 95% of the $6.3bn stolen with its own funds, and the FBI has blamed North Korea for the theft.
Feany1 min read
Binance hit by $6.3bn theft, the largest crypto heist ever recorded
Most of the money was moved out in about 20 minutes. Analysts link the attack to North Korean hackers; Binance says it will cover all losses and about $3bn has been frozen.
Ubariehi2 min read
Hackers send fake nuclear and chemical attack alerts to phones in Ukraine and Russia
Both countries' emergency warning apps were compromised within hours of each other. President Zelensky confirmed Ukraine hacked Russia's system in response.
Feany1 min read
Google launches Gemini 4 Carbon, an AI model built to find and fix security flaws
Access is limited to vetted cyber defenders for now. Google is also shutting down its Jules coding agent and folding it into its Antigravity platform.
Ubariehi1 min read
Format: News

