North Korea Denies Involvement in $6.3 Billion Binance Hack

North Korea has rejected allegations by the US Federal Bureau of Investigation (FBI) linking the country to a cyberattack involving Binance. Pyongyang described the accusation as a serious political provocation and denied responsibility.

The dispute comes as Binance continues to address the aftermath of the incident and its impact on user confidence. Reports indicate that the exchange experienced approximately $4.72 billion in net outflows in the days following the reopening of withdrawals. Much of the reported outflow consisted of Tether (USDT).

Binance Addresses User Asset Concerns

Binance co-CEO Richard Teng said the company remains in very strong financial health and that customer inflows and outflows have largely returned to normal.

According to Teng, approximately 95% of the affected tokens have been replenished. The company is working with over-the-counter (OTC) providers to restore the remaining portion, which consists of less liquid assets.

Binance has also said that losses associated with the incident were covered through its Secure Asset Fund for Users (SAFU) and company reserves. The exchange has promised to publish a post-mortem report outlining further details of the incident and its response.

Conflicting Claims Over the Attack

The FBI has attributed the attack to North Korea, while Pyongyang has firmly denied the allegation. As a result, responsibility for the incident should not be treated as independently established based solely on the competing official statements.

Cyberattacks and cryptocurrency theft have become major concerns for the digital asset industry. Determining responsibility requires independently verifiable technical evidence, rather than political accusations or denials alone.

What the Incident Could Mean for Crypto Markets

Large outflows from a major exchange can raise concerns about asset security, liquidity and the ability of trading platforms to operate normally. However, withdrawals alone do not prove that an exchange is insolvent or unable to meet customer obligations.

Investors are now watching for Binance's promised post-incident report, further evidence about the alleged attacker and confirmation that normal deposit and withdrawal operations have been fully restored.