Seoul calls for verification after U.S. says North Korea was behind Binance hack

South Korea’s Ministry of Unification said it is a “priority to determine the exact situation” after U.S. investigative authorities identified North Korea as the party behind the Binance Holdings Ltd. hacking attack. For anyone following high-risk crypto flows, the point is simple: attribution can quickly turn into sanctions talk, and sanctions talk can affect banking, settlement, and counterparties.

1. According to Yonhap News Agency, a Ministry of Unification official said on November 3 at Government Complex Seoul that the ministry had not received any shared information from related agencies on the U.S. announcement that North Korea was behind the Binance Holdings Ltd. hack. The official said, “It is what the FBI (Federal Bureau of Investigation) said, and no information has been shared among our related agencies.”
2. The ministry said that confirming the facts comes first. In its wording, “it is a priority to determine the exact situation,” which is the kind of line that matters when a major exchange breach moves from cyber incident to geopolitical issue.
3. Asked whether South Korea would join additional international sanctions against North Korea, the official said it would be appropriate to review response measures with relevant ministries based on understanding the situation. The official also said, “At this point, there is no need to mention that (additional sanctions) issue.”
4. Earlier, Kim Yo Jong, North Korea’s Labor Party director of the Secretariat, called the U.S. attribution “clearly a grave political provocation” in a statement released through the Korean Central News Agency. She added that, regarding the United States’ “hostile attitude,” there would be issues for North Korea to reconsider “from various angles.”
5. The original report said the Binance Holdings Ltd. hack involved virtual assets worth about 8 trillion won. For PSPs, acquirers, and banks touching crypto flows, this is the part to watch: once a hack is publicly tied to a sanctioned jurisdiction, the operational question shifts from theft response to counterparty and compliance exposure.