In brief
A stark exchange has erupted after the United States alleged North Korea’s involvement in a record‑breaking cryptocurrency theft from Binance. Kim Yo Jong named the claims defamatory, citing a violation of sovereignty and a narrative that misleads the international community. Meanwhile, the FBI has attributed responsibility to North Korean actors, adding a further layer of complexity to the geopolitical debate.
The largest cryptocurrency theft on record, in which hackers stole more than $6 billion from Binance, has sparked a diplomatic flare‑up as North Korea’s Kim Yo Jong publicly condemned the United States for attempting to link the incident to a state‑supported hacking group. The accusation, pitched by U.S. officials and supported by a Federal Bureau of Investigation (FBI) report, has been described by the DPRK as a grave violation of sovereignty and an effort to defame the country as a cyber criminal state.
On Monday, Kim Yo Jong, the department director of the Central Committee of the Workers’ Party of Korea and a senior figure in Pyongyang’s foreign policy apparatus, released a statement on the Korean Central News Agency (KCNA). She called the allegation an attempt to "denigrate her country" and an act of "misleading" the international public. The statement said the United States "attempted to spread misunderstanding of the DPRK in the international community, blindly linking the DPRK with the ’cyber crime’ incidents whenever they occur on an international scale." Kim added that this was "a grave political provocation against the DPRK" and that the country would "monitor and reconsider" the U.S. hostile stance moving forward.
Underpinning Kim’s rebuttal is the FBI’s assessment that North Korean actors were responsible for the heist. The agency’s analysis, released in a brief press notice a month prior, identified a hacking group believed to receive support from the DPRK’s State Information and Informatics Department. The FBI’s report described the operation as involving “high‑level privilege escalation and coordinated phishing” tactics typical of a well‑funded state‑backed campaign. Though the FBI question remains officially classified, the agency’s public statements have fed into the U.S. narrative linking the theft to North Korean cyber capabilities.
Binance, the world’s largest cryptocurrency exchange, confirmed the theft in a Friday press release. The exchange attributed the loss to a security breach that exploited “multiple vulnerabilities” across its vault infrastructure. That same day, several U.S. lawmakers and regulators called the incident a “wake‑up call” to the cryptocurrency industry’s reliance on custodial services that lack robust multi‑layered security. The U.S. Department of Justice closed a civil investigation into the heist, citing the massive amount of untraceable digital assets and the lack of a straightforward recovery path.
In contrast, the United States’ official position stems from a broader criticism of the DPRK’s role in global cybercrime. The U.S. has repeatedly accused Pyongyang of sponsoring phishing operations and advanced persistent threats across several industries. The latest claim connects the Binance theft to a rumored North Korean hacking ring chillingly called “Nukleus,” a group that first surfaced in 2025 following a series of ransomware attacks on U.S. infrastructure. The accusation emerged during a briefing on November 2, in which U.S. officials linked the heist to a
