In brief
North Korean leader Kim Yo Jong condemned the United States for linking a massive $6bn Binance cryptocurrency theft to a hacking group said to be backed by the DPRK, labeling the claims as defamation and a threat to sovereignty. The U.S. has suggested North Korean involvement, but the official denies any role, calling the allegations absurd rhetoric. The heist remains the largest known crypto robbery, but the parties involved and the implications for diplomatic tensions are still unclear.
On November 3, 2026, Kim Yo Jong, director of the Central Committee of the Workers’ Party of Korea, delivered a harsh rebuke to the United States for linking the record $6 billion Binance cryptocurrency heist to a North Korean hacking unit. In a statement carried by the Korean Central News Agency, Kim described the U.S. claim as an attempt to defame the DPRK, a "cyber criminal state," and a grave provocation that violated Korean sovereignty.
The U.S. has linked the criminal activity to a hacking group it says is "supported" by North Korea, a claim the Republic of Korea has consistently disputed. Kim’s retort comes amid rising tensions over allegations that DPRK actors were behind the largest digital currency theft in history, although no concrete evidence has been publicly released.
Background of the Binance Heist
Binance, the world’s biggest cryptocurrency exchange, confirmed on May 15 that hackers had siphoned more than $6 billion from user accounts and wallets, a loss that dwarfs previous crypto breaches. The theft, reported by Reuters and other outlets, remains the largest recorded incident of its kind, involving sophisticated phishing and credential‑stealing techniques.
U.S. officials suggested that the attack was the work of a North Korean‑affiliated group, citing intelligence sources that linked the operation to a previously identified DPRK hacking unit. However, the United States has not publicly released evidence tying the group to the Binance breach.
DPRK’s Counter‑Statement
Kim Yo Jong dismissed the U.S. allegations as "absurd rhetoric," stating that the United States’ narrative was an attempt to create a false connection between the DPRK and cybercrime incidents in the international community. She called the U.S. attack a “grave political provocation” and warned that the country was closely monitoring U.S. hostile actions, vowing to reconsider its stance on various issues if necessary.
Reuter’s coverage of the same event noted that the North Korean official characterized the allegations as a “grave political provocation” against the DPRK and a violation of its sovereignty, echoing the Xinhua report. The repetition of the state’s condemnation across multiple state media outlets underscores the seriousness with which Seoul views the U.S. narrative.
Open Questions and Uncertainties
Despite the DPRK’s denial, no official statement has revealed the specific evidence the U.S. used to link it to the heist. Analysts emphasize that the digital nature of the theft makes attribution challenging, as attackers can mask identities and routes of funds across international borders.
Questions remain over the identity of the perpetrators: Are they a state‑backed group, a rogue hacker collective, or a private syndicate with ties to DPRK operatives? The U.S. and allied agencies are still investigating the origins of the malware and the pathways the stolen assets took beyond the Binance platform.
Furthermore, the diplomatic impact persists. With the DPRK declaring the accusations a violation of sovereignty, diplomatic channels between the U.S. and North Korea are increasingly strained, potentially affecting ongoing negotiations on issues ranging from sanctions to nuclear non‑proliferation.
While the U.S. continues to push its narrative that the DPRK played a role, the Republic of Korea’s official stance—backed by statements from Kim Yo Jong and other senior officials—reasserts that the allegations are unfounded and politically motivated.
As investigations proceed, the global crypto community watches closely, aware that a lack of clarity may lead to further tightening of regulatory oversight over exchanges and heightened scrutiny of cross‑border transactions. The Binance heist highlights the vulnerabilities of digital assets and the geopolitical ramifications that accompany large‑scale cyber‑frauds.
