# North Korea Denies Involvement in Record $6.3 Billion Binance Hack Pyongyang rejects US allegations regarding the historic cryptocurrency exchange security breach. - **Source:** [BBC News](https://www.bbc.co.uk/news/technology) - **Published:** 2026-11-03 - **Topic:** [Business](https://brifing.si/c/business) - **Original article:** - **On Brifing:** https://brifing.si/s/81dfbe02-ec73-4a00-b27f-9514d0a06f6e ## Denial of Cyber Allegations North Korea officially denied responsibility for the record $6.3 billion Binance hack, dismissing the accusations as absurd rhetoric. Kim Yo Jong, sister of leader Kim Jong Un, characterized the claims as a sinister attempt by the United States to damage Pyongyang's international image and mislead global public opinion regarding cyber crimes. ## US Attribution to Pyongyang The FBI, Secret Service, and various cyber analysts have explicitly linked the massive breach to North Korea. Authorities identified the state-backed hacking group known as TraderTraitor, or the Lazarus Group, as the primary orchestrator. This incident follows a pattern of accusations regarding North Korea utilizing cyber-crime to finance its sanctioned national economy. ## Technical Breach Mechanism Binance reported that the unauthorized withdrawals were facilitated after an engineer's laptop was compromised. This specific entry point allowed attackers to bypass security protocols and siphon assets. The exchange has since resumed trading operations after working closely with various asset issuers to freeze the specific accounts linked to the malicious activity. ## Financial Impact and Recovery Following the resumption of services on Sunday, Binance recorded a net withdrawal of $5.27 billion from the platform. Despite this significant outflow, the company confirmed that transaction levels have stabilized. Binance has committed to covering all losses, reporting that approximately 95% of the stolen assets have already been successfully recovered or covered. ## Historical Context of Attacks This incident is not an isolated event, as Pyongyang has been blamed for numerous major cyber attacks in recent years. Notably, the same TraderTraitor unit was previously held responsible for a $1.5 billion hack of the Bybit exchange in 2025. These recurring events highlight the persistent threat posed by state-sponsored hacking operations. ## State-Sponsored Cyber Infrastructure Research indicates that Pyongyang has systematically developed its cyber operations by recruiting promising university students. These individuals are reportedly funneled into specialized hacker units overseen directly by the country's intelligence agency. This structured approach to cyber warfare demonstrates a long-term strategic investment in developing sophisticated digital capabilities for state objectives. ## Industry Response and Coordination The FBI has actively called on industry partners to assist in blocking transactions associated with cryptocurrency accounts linked to the TraderTraitor group. This collaborative effort aims to isolate the attackers and prevent the movement of stolen funds. Binance continues to focus its public communications on the technical nature of the breach. ## Geopolitical Tensions and Cybercrime The denial from Pyongyang underscores the deepening geopolitical friction surrounding digital security and state-sponsored cybercrime. As nations grapple with the financial implications of such large-scale hacks, the reliance on blockchain analysis to track illicit movements becomes critical. This event marks a significant escalation in the ongoing conflict between global regulators and actors. ## Sources covering this story - https://www.bbc.co.uk/news/articles/c6rey4v53exgo?at_medium=RSS&at_campaign=rss — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._