TLDR
- Kim Yo Jong, sister of Kim Jong Un, denied North Korea’s role in the $6.3 billion Binance hack.
- The FBI, TRM Labs, Chainalysis and ZachXBT linked the attack to North Korea’s TraderTraitor group.
- Kim suggested the US could be behind the theft but gave no evidence.
- The attacker used EIP-7702 and 50 pre-signed authorizations, according to TRM Labs.
- Binance published proof of reserves and said it replenished about 95% of affected assets.
North Korea has denied any role in the $6.3 billion hack of crypto exchange Binance. Kim Yo Jong, the sister of North Korean leader Kim Jong Un, made the denial in a statement. The statement was released through the Korean Central News Agency (KCNA) on Tuesday.
Kim Jong Un's Sister Denies North Korea's Role in $6.3 Billion Binance Hack
Kim Yo Jong, sister of North Korean leader Kim Jong Un, denied Pyongyang's involvement in the $6.3 billion hack of Binance, the world's largest cryptocurrency exchange, calling the FBI's accusations… pic.twitter.com/A98tE5aK7y
— Wu Blockchain (@WuBlockchain) November 3, 2026
Kim rejected the FBI’s claim that a North Korean-backed hacking group carried out the attack. She said the FBI is trying to brand the country a “cyber criminal state.” She called the US assertion “an absurd rhetoric and nothing new.”
South Korea’s Yonhap News Agency reported her remarks on Monday. The outlet said she rejected the FBI’s assessment of last week’s Binance hack. The two reports describe the same statement.
Kim described the allegations as a political provocation. She said they were meant to damage North Korea’s standing in the international community. She also said the US often links the country to cyber crime whenever a large incident occurs.
The FBI also blamed North Korea for the $1.5 billion Bybit hack in February 2025. Kim rejected that accusation as well. The FBI did not immediately respond to requests for comment from Cointelegraph and The Block.
Kim Points to the US
Kim also appeared to suggest the US could have been behind the theft. She said that if the US looks at who would receive the stolen funds once they are retrieved, it “may get a clue about who is behind the hacking incident.”
The statement gave no evidence linking Washington to the attack. Cointelegraph noted this in its report. No US official had responded to the claim at the time of reporting.
What Investigators Found
Last week, blockchain intelligence firm TRM Labs attributed the attack to North Korea’s TraderTraitor group. It said it had high confidence in the finding. It cited both onchain and offchain intelligence.
Chainalysis and onchain investigator ZachXBT also linked the theft to North Korean hackers. Three firms in total, including TRM Labs, pointed to North Korean actors. Over the weekend, the FBI confirmed North Korea was responsible. It used the name “TraderTraitor” for this activity.
TRM Labs listed similarities with earlier North Korean attacks. These include advance preparation and the use of Tornado Cash to fund attacker wallets. They also include the coordinated use of transaction signatures obtained earlier. The firm said the laundering activity differed from the pattern after the Bybit hack.
According to TRM Labs, the attacker tested malicious code on three wallets before striking. The attack on Binance took place on Thursday. On Ethereum, the attacker used EIP-7702 to turn a Binance hot wallet into a sweeper controlled by the attacker. The attacker prepared 50 pre-signed authorizations so that one would stay valid at execution.
ZachXBT also found a connection between the Binance and Bitget hacks. He said stolen funds from both incidents were mixed at the same address after passing through THORChain. Bitget CEO Gracy Chen earlier said early findings linked IP addresses to VPN services used “by a certain DPRK group.”
On Monday, Binance published its first set of proof of reserves. The exchange said it replenished about 95% of the assets affected by the hack. It used its own funds to do so.
North Korea’s denial came on Tuesday, a day after Yonhap first reported Kim’s remarks.
Stop guessing and start investing with confidence. KnockoutStocks gives you the AI insights, market intelligence, and stock research you need to spot opportunities, cut through the noise, and make smarter investment decisions — all in one powerful platform.
Sign up today and get 50% OFF full access to our premium stock picks.
Simply use coupon code SPECIAL50 at checkout to claim your exclusive discount.







