Headline: North Korea Rejects FBI’s Attribution of $6.3B Binance Heist as “Political Provocation” North Korea’s regime has flatly denied any involvement in the massive October crypto theft from Binance, calling the FBI’s attribution to a DPRK-linked hacking group a politically motivated attack on Pyongyang. What North Korea said - Kim Yo Jong, sister of leader Kim Jong Un, issued an unusually direct rebuttal via KCNA, quoted by Yonhap News. She called the U.S. allegations a “grave political provocation,” described the accusation as “absurd rhetoric,” and accused Washington of trying to brand the DPRK a “cyber criminal state.” - Kim also criticized U.S. plans to confiscate recovered cryptocurrency, suggesting that who ultimately receives any recovered funds could reveal the true perpetrators — while offering no alternative attribution or evidence. She warned North Korea was “closely monitoring” U.S. actions and implied the government would reconsider its stance toward Washington. What the FBI and investigators say - On October 31 the FBI publicly attributed the October 29 theft — initially pegged at roughly $6.3 billion — to TraderTraitor, a hacking operation the agency says has ties to North Korean cyber activity. - Working with the U.S. Secret Service and the IRS Criminal Investigation division, investigators tracked the movement of stolen funds and warned the attackers were converting assets primarily into Ethereum and routing them through decentralized finance platforms and instant swap services. - The FBI published wallet addresses and urged exchanges, blockchain operators, analytics firms and other digital-asset providers to block transactions linked to those addresses. Blockchain analysis and evolving totals - Independent blockchain firms quickly mapped the flows. TRM Labs told reporters it had high confidence in the TraderTraitor attribution. - Elliptic’s November 2 analysis put the theft at about $6.43 billion — slightly higher than the commonly cited $6.3 billion — and documented expansive movement across networks: roughly 12,000 wallets, more than 40,000 transactions, and activity spanning 11 blockchains in the first four days. - Much of the initial activity occurred on Tron, where funds were spread across about 7,700 addresses before being bridged to Ethereum to complicate tracing. - Elliptic estimated about $786 million in stablecoins were converted into other tokens before issuers could freeze them. - Approximately $2.85 billion was frozen or seized (around 44% of the firm’s total estimate), leaving about $3.24 billion remaining in addresses tied to the incident — primarily in Bitcoin and Ethereum. - Only a small portion appeared to have been converted into readily spendable funds; tracing included about 28 BTC moved through mixers. Binance’s response and recovery efforts - Binance’s preliminary probe pointed to a compromised engineer’s laptop that may have enabled unauthorized access to internal systems; the exchange said it had found no evidence of leaked wallet private keys. - The exchange began restoring withdrawals on November 1 after temporarily halting services. By November 2 Binance completed a reserve verification covering ten major tokens — including Bitcoin, Ethereum, BNB, Solana, USDT, USDC, XRP, and others — and said it had replaced roughly 95% of affected assets from company resources, with less-liquid tokens accounting for the remaining gap. - Binance has committed to absorbing the losses rather than passing them onto customers and said additional withdrawal capabilities would resume progressively from November 3, subject to security checks. What’s next - Law enforcement and blockchain trackers continue to follow fund movements and are coordinating with industry providers to block tainted addresses. The U.S. government’s public attribution has been amplified by multiple analytics firms, while Pyongyang’s rare direct denial frames the episode as another front in geopolitical confrontation over cyberspace and crypto. Takeaway - The technical tracing points to widespread cross-chain fund dispersion and partial recoveries, but attribution remains contested in political rhetoric. Investigators and exchanges are focused on freezing and recovering assets and shoring up security after one of the largest known crypto thefts to date. Read more AI-generated news on: https://app.chaingpt.org/news