South Korea has not begun sanctions talks over Binance theft FBI blames on North Korea

South Korea has not started discussing sanctions on North Korea over the $6.3 billion Binance theft that the FBI blames on Pyongyang, a Unification Ministry official said on November 5, 2026, according to Yonhap News Agency. The Foreign Ministry is separately reviewing options against North Korean cyber activity, including unilateral sanctions, but has set no timeline.

South Korea has yet to begin Binance hack sanctions discussions

Speaking to reporters at the government complex in Seoul, a Unification Ministry official said authorities had not fully established what happened during the October 29 security breach.

The official explained that the government needed a clearer understanding of the incident before discussing an appropriate response. Internal information-sharing and consultations among relevant departments would also be necessary before any decisions could be considered.

The position indicates that Binance hack sanctions remain at an early stage, rather than representing a decision by Seoul to abandon additional restrictions against Pyongyang.

South Korea’s Foreign Ministry, however, confirmed that it was examining broader options for addressing North Korean cyber operations.

Ministry spokesperson Park Doo-soon said the government was conducting an internal review of several possible measures, including unilateral cyber sanctions. He stressed that no final decision had been reached.

Park also pointed to the wider security challenges involving North Korea, suggesting that Seoul was assessing its response within the context of other serious issues.

His comments leave open the possibility of future restrictions, although there is currently no confirmed timetable for introducing them.

FBI attributes $6.3 billion Binance theft to North Korea

The diplomatic discussions follow an October 31 announcement by the Federal Bureau of Investigation identifying North Korea as responsible for the theft of more than $6 billion in cryptocurrency from Binance.

In its public security alert, the FBI identified the suspected operation as TraderTraitor, a North Korean-linked cyber operation previously associated with cryptocurrency thefts.

According to the bureau, the attackers began converting the stolen assets primarily into Ethereum (ETH), with investigators expecting further laundering through decentralized finance platforms and instant cryptocurrency swap services.

The FBI subsequently urged cryptocurrency exchanges, blockchain infrastructure providers, decentralized finance services and analytics companies to block transactions connected to addresses associated with the stolen funds.

Binance’s November 3 incident update placed the value of affected digital assets at approximately $6.34 billion. The exchange also reported that around $2.85 billion had been frozen or intercepted through cooperation with law enforcement agencies and industry partners.

The exchange said it would absorb the financial impact of the incident rather than pass the losses to customers. It also reported that approximately 98% of affected token assets had been replenished as of October 31.

Importantly, the FBI’s attribution remains a finding of U.S. investigators, while North Korea disputes the allegation. Binance has also described its investigation as ongoing.

The incident has intensified scrutiny of cryptocurrency exchange security, particularly the risks associated with compromised employee devices, internal access credentials and wallet authorization systems.

North Korea rejects allegations as diplomatic tensions continue

Pyongyang has strongly rejected Washington’s accusation, describing the allegation as politically motivated.

Kim Yo-jong, the sister of North Korean leader Kim Jong-un and a senior ruling-party official, dismissed the FBI’s findings as a “grave political provocation.”

Her response followed the United States’ public identification of TraderTraitor and its warning to cryptocurrency service providers about the movement of the stolen assets.

North Korea has repeatedly denied allegations connecting its government to international cryptocurrency thefts, despite continued accusations from Western governments and cybersecurity investigators.

The dispute complicates efforts to establish an international response to the Binance incident. Any additional restrictions could become another point of tension between Pyongyang and countries seeking to limit its access to international financial networks.

Separately, South Korean Unification Minister Chung Dong-young said on November 5 that North Korea appeared willing to consider discussions with Washington if negotiations served its interests.

However, Pyongyang continues to demand changes to policies it considers hostile, including sanctions, military exercises and human rights-related measures.

The disagreement illustrates the wider diplomatic environment in which decisions about Binance hack sanctions are being considered.

Seoul maintains cybersecurity cooperation with the U.S. and Japan

Although South Korea has not initiated specific sanctions discussions over the Binance theft, its Foreign Ministry says cooperation against North Korean cybercrime remains active.

Park Doo-soon confirmed that Seoul continues working with Washington through bilateral working groups and participates in separate trilateral arrangements involving the United States and Japan.

These partnerships focus on addressing North Korea’s illicit cyber operations and were established before the latest cryptocurrency incident.

The cooperation could become particularly important as authorities investigate how the attackers accessed Binance’s internal systems and moved billions of dollars in digital assets across multiple blockchain networks.

The Binance hack sanctions debate also comes amid domestic disagreements over South Korea’s broader North Korea policy.

Chung has opposed proposed sanctions following a September 21 land mine explosion inside the Demilitarized Zone that injured three South Korean soldiers, including two seriously.

Opposition politicians have criticized his position as too accommodating toward Pyongyang. Chung, however, has argued that imposing additional restrictions over the incident could provoke North Korea without producing meaningful results.

For now, Seoul appears focused on gathering information, coordinating with international partners and reviewing its available options.

Whether the investigation eventually leads to Binance hack sanctions remains uncertain. What is clear is that the $6.3 billion theft has added another major cybersecurity and diplomatic challenge to an already complicated relationship between South Korea and North Korea.