North Korean officials publicly rejected the FBI’s attribution of the $6.4 billion Binance hack, calling the claim politically motivated. The denial follows multiple reports linking state‑run wallets to the exploit, and comes as South Korean regulators urge exchanges to increase cold‑storage holdings while Arbitrum’s council moved $30 million of the stolen funds without possessing the hacker’s private key.
What happened
On November 3, the FBI identified wallet addresses controlled by North Korea as part of the largest crypto theft in history, estimating the loss at $6.4 billion. In response, North Korean officials issued a statement denying any involvement and accusing the United States of politicizing the investigation. The denial was reported by CoinDesk and Cointelegraph, with the latter noting that Kim Yo Jong labeled the allegations as politically motivated.
Separately, Arbitrum’s 12‑person council briefly rewrote a core contract to transfer $30 million from an address it did not control, then restored the original code. This marks the second instance this year that the council has intervened in contract logic to move funds associated with the Binance hack.
South Korea’s financial regulator, which already requires exchanges to keep at least 80 percent of customer assets in cold wallets, called for an even higher cold‑storage ratio in the wake of the hack. The regulator’s statement was published by Cointelegraph on the same day.
Why it matters for traders
North Korea’s denial does not change the underlying forensic evidence linking its wallets to the hack, but it may affect diplomatic pressure and future cooperation on asset recovery. Traders should monitor any legal or diplomatic developments that could influence the ability of authorities to seize or freeze the stolen assets.
The Arbitrum council’s intervention demonstrates that blockchain governance bodies can act quickly to reallocate illicit funds, potentially affecting the liquidity of the stolen assets on secondary markets. Such moves can create short‑term price pressure on tokens involved in the hack.
South Korea’s push for higher cold‑storage ratios signals tighter regulatory scrutiny across the region. Exchanges that fail to meet stricter standards may face operational disruptions, which could impact trading volumes and withdrawal capabilities for users.
What to watch next
- Further statements from the FBI or North Korean authorities that could clarify the attribution.
- Any legal actions or asset‑freezing orders issued by South Korean regulators or other jurisdictions.
- Additional governance actions by Arbitrum or other layer‑2 platforms concerning hack‑related funds.
- Market response to potential seizure of the $30 million moved by Arbitrum’s council.
- Updates on cold‑storage compliance among major exchanges in South Korea and globally.
Sources
- North Korea denies role in $6.4 billion Binance hack after FBI points to TraderTraitor (coindesk.com)
- Arbitrum’s council moved $30 million of Binance hack funds without the hacker’s key (coindesk.com)
- South Korea urges exchanges to boost cold storage after Binance hack (cointelegraph.com)
- North Korea denies role in $6.3B Binance hack, points finger at US (cointelegraph.com)
- Kim Jong-Un’s sister rejects FBI claims linking North Korea to record $6 billion Binance hack: reports (theblock.co)
This is a developing story and will be updated as new information is confirmed. For information only, not financial advice. How we report.


