TheBlock
Kim Yo-jong, the sister of North Korean leader Kim Jong-Un and a senior government official, rejected the FBI’s finding that North Korea was responsible for last week’s $6 billion Binance hack, Yonhap News Agency reported. The FBI attributed the attack to North Korea over the weekend and identified the activity as “TraderTraitor.”
Three firms, including TRM Labs, also linked the exploit to North Korean actors. Before the attack, the attacker tested malicious code on three wallets, then used Ethereum’s EIP-7702 to turn a Binance hot wallet into a sweeper controlled by the attacker. TRM Labs said the attacker prepared 50 pre-signed authorizations so one would remain valid when executed.
Why it matters
The public denial puts North Korea’s government in direct dispute with the FBI and blockchain investigators over responsibility for a record-setting crypto theft. Kim said the FBI was trying to label the DPRK a “cyber criminal state” and challenged its claims about a hacking organization allegedly supported by North Korea.
The competing statements do not change the technical account of how the wallet was exploited, but they keep attribution at the center of the story. The FBI had not immediately responded to a request for comment, according to The Block.
Market impact
Binance said Monday that it had replenished about 95% of the assets affected by the hack using its own funds, and published its first proof-of-reserves report. That reimbursement addresses most of the reported asset shortfall, while the dispute over who carried out the attack remains unresolved in public statements.
Frequently asked questions
-
What did Kim Yo-jong say about the FBI’s attribution?
She rejected the FBI’s claim that North Korea was responsible for the Binance hack and said the agency was trying to label the DPRK a “cyber criminal state.”
-
Which investigators linked the attack to North Korea?
Three firms, including TRM Labs, attributed the attack to North Korean actors. The FBI also identified the activity as “TraderTraitor.”
-
How did the attacker exploit Binance’s hot wallet?
The attacker used Ethereum’s EIP-7702 to turn a Binance hot wallet into a sweeper controlled by the attacker.
-
What role did the 50 pre-signed authorizations play?
TRM Labs said the attacker prepared 50 authorizations so that one would remain valid when executed.
-
How much of the affected assets did Binance say it replenished?
Binance said it replenished about 95% of the assets affected by the hack using its own funds.
WuBlockchain
CoinTelegraph
CryptoSlate
Lookonchain
CoinDesk