In brief
A $6.3 billion cryptocurrency robbery from Binance has been tied to North Korean state‑sponsored hackers, marking a new scale of cyber‑attacks that fuel the regime’s weapon programmes. South Korea has convened officials to tighten its crypto safeguards while North Korea’s top sister, Kim Yo‑jong, publicly denounced the FBI’s accusations. Joint efforts are urged to counter the growing threat.
A record $6.3 billion cryptocurrency theft from Binance has been linked to North Korea, the latest in a series of state‑sponsored cyber‑attacks aimed at financing its missile programmes, according to a Yonhap editorial published on 3 November 2026.
The developers of a global blockchain analytics firm, Chainalysis, estimated that South Korea’s crypto economy is valued at $449 billion, making it the largest retail‑driven market in East Asia and a prime target for Pyongyang’s elite hacking group, TraderTraitor.
In response, South Korean officials from the Financial Services Commission and cryptocurrency exchanges met on Monday to discuss an emergency response system and new regulatory tweaks designed to protect the domestic crypto market from further North Korean incursions.
Kim Yo‑jong, the sister of North Korean leader Kim Jong‑un, issued a statement that day rejecting the U.S. Federal Bureau of Investigation’s claim that the regime was behind the heist. “The choice for peace includes dialogue of course, but this is not surely equated with national interests for us,” she said, labeling the accusation a “grave political provocation” that underscored U.S. hostility toward Pyongyang.
“The so‑called ‘cryptocurrency hacking case by the DPRK’ is no more than a tip of iceberg that shows the essence of the U.S. hostile policy toward the DPRK.”
A TechCrunch analysis noted that the FBI and blockchain investigators have blamed North Korea for the robbery, underscoring the growing evidence that state actors are expanding their cyber‑operating reach. Both sides now stress the need for heightened vigilance and coordinated action to prevent further attacks on the global digital‑asset ecosystem.
