North Korea has declared that it sees no immediate need for talks with the United States, with Kim Yo Jong linking the decision directly to the FBI’s recent attribution of a massive cryptocurrency theft from Binance.
In a statement carried by the official Korean Central News Agency, the sister of leader Kim Jong Un described the U.S. accusation as evidence of a “hostile policy” and a “grave political provocation.”
The comments come days after the FBI announced that North Korean state-linked hackers, operating under the name TraderTraitor, were responsible for draining more than $6 billion from the world’s largest cryptocurrency exchange.
Register for the next Tekedia Mini-MBA.
Register for Tekedia AI in Business Masterclass.
Join Tekedia Capital Syndicate and co-invest in great global startups.
Blockchain analytics firms including TRM Labs, Elliptic and Chainalysis independently reached the same conclusion, describing the incident as the largest crypto heist on record, more than four times the size of the $1.5 billion Bybit theft attributed to the same group in early 2025.
The group moved most of the funds out of Binance wallets within roughly 20 minutes across multiple blockchains.
Authorities and private firms have since frozen or recovered about $3 billion, while the remaining assets continue moving through decentralized finance platforms and mixing services in what appears to be a laundering effort.
Kim Yo Jong rejected the attribution outright, arguing that the United States was attempting to brand North Korea a “cyber criminal state” and misleading international opinion by assigning every major cybercrime to Pyongyang.
She further suggested that U.S. plans to seize stolen cryptocurrency and incorporate it into a strategic reserve raised questions about who ultimately benefits from such incidents.
The statement marks North Korea’s first official response to the Binance attack and signals a hardening of its diplomatic posture at a time when some observers had floated the possibility of renewed engagement.
The episode underscores a longer pattern in which North Korean cyber operations have become a significant source of hard currency for the isolated regime.
North Korea has strengthened its position as one of the biggest cybersecurity threats to the global cryptocurrency industry, with hackers linked to the country stealing billions of dollars from cryptocurrency exchanges, blockchain networks and decentralised finance (DeFi) platforms.
According to blockchain analytics firm Chainalysis, North Korean-linked hackers stole approximately $2.02 billion in cryptocurrency in 2025, representing a 51% increase from the previous year.
The figure brought the estimated cumulative value of cryptocurrency stolen by the country to $6.75 billion, despite a significant reduction in the number of recorded attacks.
The findings highlight an increasingly concerning pattern in the cryptocurrency industry, where North Korean cybercriminals are carrying out fewer attacks but extracting substantially larger amounts of digital assets from their targets.
Chainalysis noted that North Korean hackers accounted for approximately 76% of all cryptocurrency service compromises recorded in 2025, demonstrating the growing scale and financial impact of their operations.
One of the most significant examples of North Korea’s growing involvement in cryptocurrency theft was the February 2025 attack on Bybit.
The cryptocurrency exchange lost approximately $1.5 billion in Ethereum during the incident, making it the largest cryptocurrency theft recorded at the time.
Investigations linked the attack to North Korean cybercriminals, with findings suggesting that the hackers compromised the infrastructure used in Bybit’s transaction approval process rather than directly exploiting a weakness in the exchange’s smart contracts.
The incident demonstrated how attackers could bypass sophisticated security arrangements by targeting trusted third-party systems and manipulating employees or infrastructure responsible for authorising cryptocurrency transactions.
Beyond exploiting technical vulnerabilities, North Korean hackers have increasingly relied on social engineering, identity fraud and insider infiltration to gain access to cryptocurrency platforms.
Chainalysis identified fraudulent IT employment schemes as one of the major methods used by North Korean operatives to penetrate cryptocurrency and Web3 companies.
Under these schemes, individuals allegedly use fabricated identities, stolen personal information and misleading employment credentials to secure remote positions within technology companies.
Once employed, these operatives can potentially gain access to sensitive company information, internal communication systems, software infrastructure and cryptocurrency-related operations.
The hackers have also developed fake recruitment strategies, impersonating recruiters from established technology and Web3 companies to target developers and other employees.
The increasing frequency and financial impact of North Korean-linked cryptocurrency attacks have raised questions about the security of digital asset platforms.
Unlike conventional cybercriminals who may focus on smaller financial targets, North Korean-linked groups have demonstrated the ability to pursue large cryptocurrency exchanges, institutional custodians and blockchain infrastructure.
Their growing reliance on social engineering also suggests that strengthening smart contract security alone may not be sufficient to protect cryptocurrency companies.
Outlook
North Korea’s continued involvement in cryptocurrency exploitation is likely to remain a major security concern for the digital asset industry, particularly as hackers become more sophisticated in targeting both technological infrastructure and human vulnerabilities.
The Binance incident, alongside the $1.5 billion Bybit theft and other attacks attributed to North Korean-linked groups, highlights the growing ability of these actors to compromise major cryptocurrency platforms and move substantial amounts of digital assets within minutes.
Meanwhile, North Korea’s rejection of the FBI’s attribution and its description of the accusation as a hostile U.S. policy could further complicate international cooperation on cybercrime investigations.
Ultimately, as cryptocurrency adoption expands and digital asset platforms manage increasingly valuable reserves, North Korean-linked hacking groups are likely to remain a significant threat.