After the FBI pointed to a North Korean hacking group in the roughly $6.3 billion theft of crypto assets from Binance, Kim Yo-jong, director of the Workers' Party General Affairs Department, took the unusual step of issuing a statement herself. On the same day, Nov. 3, President Lee Jae-myung told officials to consider a government-wide ‘cybersecurity czar’ body to counter a string of hacking attacks.
North Korea's Korean Central News Agency carried a statement in Kim Yo-jong's name on Nov. 3. According to the Kyunghyang Shinmun and the Seoul Shinmun, she described the US naming of North Korea as the hacking culprit as ‘clearly a grave political provocation against us.’ Pyongyang has usually replied through a KCNA commentary or a Foreign Ministry position, so Kim's personal involvement stands out.
광고 문의 · 300×250The trigger was the Binance theft on Oct. 29. The Seoul Shinmun reported that the FBI on Oct. 31 attributed the attack to the North Korean group ‘TraderTraitor.’ The loss was reported at about $6.3 billion, or roughly 8 trillion won, and whether that figure is final depends on Binance's follow-up investigation.
The logic and signals of Kim's statement
Kim argued that pinning cyber fraud around the world on North Korea misleads international opinion, and said Pyongyang opposes politicizing cyber issues as a pretext to interfere in other countries. Per the Herald Business and the Seoul Shinmun, she noted that the US had announced last year that seized crypto would go into a strategic reserve and countered that where recovered funds end up could offer a clue to who is behind the hack. The statement reportedly offered no evidence for that claim.
The statement also said there are issues to ‘reconsider’ in several respects given US hostility, and that Pyongyang is ‘closely watching.’ A Unification Ministry official said it was the first time Kim had directly reacted to international concern over North Korean cyber activity. Hong Min of the Korea Institute for National Unification said the message is aimed more at US-North Korea relations than at the cyber issue, warning against pressure while leaving the door to dialogue open.
Experts read it in similar but not identical ways. The Seoul Shinmun reported that Yang Moo-jin of the University of North Korean Studies saw a strategic signal linked to future US-North Korea talks, while Park Won-gon of Ewha Womans University said the restrained tone leaves Washington room to maneuver. The prevailing view reported is that the hack is unlikely to wreck the prospect of a US-North Korea summit.
Lee weighs a ‘cybersecurity czar’ body
The Kyunghyang Shinmun reported that on Nov. 3 President Lee ordered consideration of a government-wide countermeasure body spanning public and private sectors in response to the recent string of hacking attacks. The idea is a ‘cybersecurity czar’ organization that would oversee and coordinate security functions now scattered across agencies. Lee said artificial intelligence is making hacking smarter and more sophisticated, so the existing approach centered on after-the-fact response has clear limits.
He asked for a system that detects signs of attack in advance and for thorough patching of weaknesses in critical infrastructure such as public services, telecommunications, energy and finance. The body's organizational form, authority, supervising ministry and launch date were not in the reports we reviewed and have not been confirmed. Coincidentally, the Foreign Ministry said the same day that the leak of the Air Force One passenger list was an internal leak, not a hack.
A third view: private analysts and President Trump's distance
Unlike Pyongyang's denial, private blockchain analytics firms lean toward North Korean involvement. According to US local media reports, TRM Labs judged with ‘high confidence’ that TraderTraitor was responsible, and Chainalysis said it was likely the work of the North Korean group. By contrast, the Seoul Shinmun reported that President Trump said on Oct. 31 he did not know whether North Korea was responsible but would discuss it with Pyongyang if so, suggesting a difference in temperature even inside Washington. Reactions from China, Russia and other third countries did not appear in the reports we reviewed.
What to watch next is whether the US Treasury and State departments move on further sanctions or asset recovery, and what action North Korea attaches to its talk of ‘reconsidering.’ Hong Min expects the US response over the next one to two weeks to show whether talks might resume.
