North Korea denies U.S. allegation over Binance heist as exchange’s operations normalize

Asset outflows from Binance have normalized and the company was in “very strong financial health,” its co-CEO said, as North Korea dismissed as “absurd rhetoric” U.S. allegations that it was behind a US$6.3-billion cryptocurrency heist on its platform.

The world’s biggest cryptocurrency exchange, whose customers had withdrawn a net US$4.72-billion as of Monday after it was hit with what could be the largest-ever financial heist last week, has also launched a campaign to stem outflows and woo new users.

“In the first 24 hours, there was a spike in terms of withdrawals, as can be expected. But after that … it’s pretty much normalized,” Richard Teng told a Hong Kong Fintech Week event on Tuesday.

“The company is in very strong financial health,” he said, adding 95 per cent of the affected tokens had been replenished. “This is something that we can cover. We are able to do so.”

The crypto exchange was seeing “hourly deposits exceed withdrawals,” Binance said in an X post earlier on Tuesday, adding that it reflected improving user activity and stabilizing flows.

Gone in 20 minutes: How the biggest heist in crypto history unfolded at Binance

The FBI said at the weekend that North Korea was responsible for the theft of more than US$6-billion in crypto assets, a crime that sent shockwaves through the industry.

Kim Yo Jong, the influential sister of North Korean leader Kim Jong Un, said the U.S. allegations proved Washington remained hostile toward Pyongyang, according to a report on Tuesday by state news agency KCNA.

Pyongyang has not responded to U.S. President Donald Trump’s overtures, made earlier this year, to resume summit diplomacy. In the wake of the U.S. allegations, Kim Yo Jong said North Korea had “issues to reconsider” over what she called U.S. hostility.

“The FBI is trying to brand the DPRK as a ’cyber criminal state,’ claiming that it obtained information that a hacking organization ’supported’ by the DPRK was involved in the incident,” KCNA quoted Kim Yo Jong as saying.

“But the U.S. assertion is absurd rhetoric and nothing new,” said Kim, a ruling party official. DPRK is short for the Democratic People’s Republic of Korea.

“It is a grave political provocation against the DPRK that the U.S. misleads international public opinion as if all the cyber crimes in different parts of the world are our deeds.”

Revenue stream

North Korea faces growing scrutiny over cryptocurrency theft, which analysts say is a key source of funds for its weapons programs.

Cybersecurity experts say North Korean hackers are among the world’s most prolific crypto thieves and the proceeds help fund the country’s efforts to develop nuclear weapons and ballistic missiles capable of hitting the United States.

North Korea has stolen cryptocurrency worth US$7.6-billion this year, more than in any previous year, according to estimates by blockchain analytics firm Elliptic.

North Korea denies allegations linking it to cryptocurrency theft and other cybercrimes.

European supermarket fridges hit by second suspected cyberattack

Analysts in Seoul said Pyongyang’s unusually swift response likely reflected concern that the allegation could lead to tighter efforts to disrupt revenue streams that North Korea is accused of using to finance its weapons.

“With sanctions already in place, cryptocurrency theft has become one of North Korea’s key channels for securing funds for regime maintenance and weapons development,” said Lim Eul-chul, a professor at Kyungnam University’s Institute for Far Eastern Studies.

Additional U.S. measures targeting crypto wallets, laundering networks and cryptocurrency exchanges could choke off an important source of revenue, Lim said.

South Korea’s central bank estimated North Korea’s gross domestic product at 47.18-trillion won (US$35.09-billion) in 2025, meaning the Binance theft could be equivalent to about a sixth of its economic output.

Blockchain analytics firm Chainalysis estimated 89 per cent of crypto hack losses in 2026 were linked to North Korea, up from 15 per cent in 2021. It said the average reported loss per hack rose from US$50.65-million in 2021 to US$185.65-million in 2026.

“I guess you could call it big game hunting, where they’re targeting these larger exchanges that may take more time and more complexity to be able to do … but the payoff can be relatively large,” said Alec Zebrick, senior manager of Asia-Pacific Global Services at Chainalysis.

North Korea is one of the world’s most impoverished countries but has poured resources secured through illicit means and activities banned under UN Security Council resolutions into its missile and nuclear programs.

Kim Yo Jong said North Korea would “reconsider” unspecified issues in light of the “very unpleasant U.S. hostile attitude,” without elaborating. North Korea has not publicly responded to Trump’s offers to resume summit diplomacy.

Binance withdrawals

Binance launched a campaign on Monday offering fee rebates, rewards to eligible users who rack up at least US$10,000 in cumulative trading volume, as well as annual percentage rates of up to 10 per cent on certain yield-generating products.

The exchange’s “community appreciation campaign” will run through Nov. 21, a post on its website showed.

Binance, which froze withdrawals for more than two days after the hack and then started allowing customers to withdraw again on Sunday morning in some assets, reopened withdrawals for more assets on Tuesday.

U.S. probing Binance over possible Iran sanctions violations, source says

Since the resumption of withdrawals, Binance has seen net outflows amounting to around 3 per cent of the assets on its platform, it said on Monday, a relatively modest figure that analysts said suggested customer confidence had largely held up.

“The relatively contained price reaction suggests a degree of maturity and resilience,” said Maksym Repa, head of DeFi at Lombard, a Bitcoin finance protocol backed by Franklin Templeton.

“Investors appear to be distinguishing between a security failure at a centralized exchange and a problem with the Bitcoin network itself.”