Crypto: Kim Jong-un’s Sister Denies FBI Claims Over Binance Hack

North Korea has rejected US accusations linking it to the $6.3 billion Binance hack. Kim Yo-jong, sister of North Korean leader Kim Jong-un, described the FBI’s findings as a political provocation in a statement reported on November 3, 2026. The agency attributes the theft to TraderTraitor, a North Korean hacking group. Pyongyang disputes that conclusion but has not presented technical evidence identifying another perpetrator.

Kim Yo-jong Rejects FBI Accusations Over Binance

Pyongyang has responded directly to the American investigation. On October 30, Cointribune had already reported new evidence linking the Binance hack to North Korean hackers.

This time, the response comes from Kim Yo-jong herself. In a statement carried by the Korean Central News Agency, the influential sister of Kim Jong-un accused Washington of trying to portray North Korea as a state involved in international cybercrime.

She rejected the FBI’s assessment and described the accusations as politically motivated. Kim also argued that the United States repeatedly blames Pyongyang whenever a major cyberattack makes international headlines.

Her comments went beyond a simple denial. The North Korean official suggested that Washington could benefit from confiscating stolen cryptocurrencies. She referred to US plans for strategic digital asset reserves and questioned who might ultimately receive recovered funds.

No evidence was presented to support an implication of American involvement in the attack.

Kim also warned that Pyongyang was closely monitoring what it considers persistent US hostility.

The statement is notable because North Korean officials rarely respond so directly to individual cryptocurrency investigations.

The government has denied previous allegations involving state-backed hacking groups.

This new intervention comes after American investigators identified TraderTraitor as the group responsible for what could be the largest cryptocurrency theft on record.

The FBI Maintains Its Case Against TraderTraitor

The FBI published its official attribution on October 31. According to the agency, North Korean hackers stole more than $6 billion in digital assets from Binance on or around October 29.

The operation was identified as TraderTraitor, a name already associated with earlier attacks. In February 2025, the same group was blamed for the theft of approximately $1.5 billion from Bybit.

The Binance incident was much larger. Blockchain intelligence company TRM Labs estimates that attackers moved $6.36 billion across ten blockchains, with most transfers completed in approximately twenty minutes.

Investigators also identified preparations made before the attack, including tests involving malicious code and unusual wallet activity. On Ethereum, the attackers allegedly exploited the EIP-7702 authorization mechanism to redirect funds from a Binance wallet.

Other transfers involved apparently valid transaction signatures. TRM Labs believes the operation shares characteristics with previous North Korean cyberattacks. Its assessment is based on blockchain activity and additional intelligence.

The FBI has also released cryptocurrency addresses associated with the stolen funds.

It urged exchanges, DeFi services and other digital asset businesses to prevent transactions involving those addresses wherever possible.

Binance is meanwhile working with law enforcement to recover part of the stolen cryptocurrency.

The exchange previously reported that approximately $3 billion in assets had been frozen.

However, freezing stolen cryptocurrency does not automatically mean that it has been returned.

Kim Yo-jong’s denial does not change the FBI’s published attribution. It also does not establish that the American assessment is correct beyond dispute.

The Binance Hack Adds Pressure to US-North Korea Relations

The dispute now extends beyond cryptocurrency security.

Kim Yo-jong accused Washington of pursuing a hostile policy toward North Korea and warned that Pyongyang might reconsider its position on certain issues.

She did not announce specific retaliatory measures.

Her comments come as US President Donald Trump has expressed interest in renewed diplomacy with Kim Jong-un.

Relations between the two countries remain difficult, particularly over North Korea’s nuclear weapons program and international sanctions.

Washington has repeatedly accused North Korean hacking groups of stealing cryptocurrencies to obtain foreign currency.

Pyongyang rejects those allegations.

For Binance, the immediate concerns are different.

The exchange is attempting to recover stolen funds, restore normal withdrawals and reassure customers about its financial position.

By November 1, Binance said it had replenished approximately 95% of the assets affected by the attack.

The company is using its own resources, its SAFU protection fund and insurance reserves to replace the missing assets.

That does not mean the hackers have returned 95% of the stolen funds.

A substantial amount remains under the attackers’ control, while investigators continue monitoring transfers between wallets, decentralized protocols and trading services.

The FBI’s attribution could also complicate recovery efforts involving jurisdictions where international cooperation is limited.

No direct judicial cooperation from Pyongyang has been announced.

The dispute now has two distinct dimensions: a criminal investigation into a multibillion-dollar crypto theft and a diplomatic confrontation over responsibility.

For customers, access to their assets remains the priority. Binance has already resumed withdrawals across several networks following the attack, although some assets still require additional security checks. The investigation will continue regardless of Pyongyang’s denial, and the recovery of the missing cryptocurrency remains uncertain.