By Post of Day | World News | November 3, 2026
North Korea has strongly rejected allegations that it was responsible for the massive cyberattack targeting cryptocurrency exchange Binance, describing the accusations as politically motivated and an attempt by Washington to damage the country’s international reputation.
Kim Yo Jong, the influential sister of North Korean leader Kim Jong Un and a senior government official, issued the response on Tuesday. She dismissed the allegations as baseless and accused the United States of repeatedly associating Pyongyang with cybercrime without sufficient justification.
The dispute follows a major security incident involving Binance that has drawn international attention and renewed concerns about the growing threat of state-linked cyber operations against the cryptocurrency industry.
North Korea pushes back against US accusations
According to statements attributed to US authorities, the Federal Bureau of Investigation (FBI), the US Secret Service and independent blockchain investigators believe North Korean-linked hackers were involved in the attack.
Investigators have pointed towards TraderTraitor, a hacking operation associated with North Korea and also linked to the Lazarus Group.
Kim Yo Jong rejected the allegations, arguing that Washington was attempting to influence international opinion by portraying North Korea as responsible for cyberattacks occurring around the world.
Pyongyang maintains that opposing malicious activities in cyberspace is part of its official policy and has repeatedly denied involvement in major cryptocurrency thefts.
However, the latest denial has not ended questions surrounding the investigation or the identity of those responsible.
Why North Korea remains a focus of cryptocurrency investigations
North Korean-linked hacking groups have been repeatedly investigated in connection with major cryptocurrency thefts.
One of the most notable incidents was the February 2025 attack on crypto exchange Bybit, in which approximately $1.5 billion worth of digital assets was stolen.
Security researchers have described groups associated with North Korea as highly organised operations that target cryptocurrency exchanges, financial institutions and digital asset infrastructure.
Research organisations have also reported that North Korea has developed specialised cyber capabilities by identifying talented students and training them for technical and intelligence-related operations.
Nevertheless, North Korea continues to reject accusations of state-sponsored cybercrime.
Binance reports significant withdrawals following the incident
The security incident has also raised concerns among Binance customers about the safety of funds and the exchange’s ability to manage the aftermath.
According to information provided by a Binance spokesperson, the exchange experienced approximately $4.72 billion in net withdrawals after transactions resumed on Sunday.
The company described the withdrawals as a relatively small proportion of its overall holdings, which were estimated at approximately $157 billion.
Binance also indicated that withdrawal activity was gradually returning to normal levels.
The company said its initial investigation suggested that an engineer’s laptop had been compromised, potentially providing attackers with an opportunity to execute unauthorised transactions.
Following the incident, Binance worked with cryptocurrency issuers and other industry participants to identify and freeze affected assets.
Binance says it will cover affected customer losses
One of the most important developments for customers is Binance’s commitment to covering losses associated with the security breach.
The exchange has stated that it has already covered approximately 95% of the affected assets and intends to address the remaining losses.
Trading in major cryptocurrencies has also resumed following the security response.
The FBI has separately encouraged cryptocurrency companies and other industry participants to identify and block transactions involving wallets believed to be connected to the suspected hacking group.
What this means for the cryptocurrency industry
The incident highlights the growing security challenges facing centralised cryptocurrency exchanges.
Even platforms holding substantial digital asset reserves remain exposed to operational vulnerabilities, compromised employee devices and increasingly sophisticated cyberattacks.
For cryptocurrency users, the situation reinforces several important security lessons:
- Exchange security matters: Investors should consider how exchanges protect their systems and respond to major incidents.
- Diversification of custody: Keeping all digital assets on a single exchange can increase exposure to platform-specific risks.
- Monitor official announcements: Users should rely on verified exchange communications rather than unconfirmed social media reports.
- Understand withdrawal risks: Large-scale withdrawals can create uncertainty even when an exchange reports sufficient reserves.
- Watch blockchain developments: On-chain investigations can help identify suspicious transactions, although wallet attribution is not always conclusive.
The investigation into the Binance incident remains an important test for international cybersecurity cooperation and the wider digital asset industry.
While Washington continues to point towards North Korean-linked hacking groups, Pyongyang has firmly denied responsibility. The available public information does not independently establish who carried out the attack.
For now, the incident leaves the cryptocurrency industry facing two major questions: who was behind the breach, and what further measures will exchanges introduce to prevent similar attacks?
Source and reporting note: This article is an independently written news report based on information attributed to BBC reporting, US authorities, blockchain investigators and Binance statements. Allegations remain attributed to their respective sources and should not be interpreted as independently established facts.
Post of Day will update this report as further verified information becomes available.
