North Korea Fires Projectiles as Binance Reveals New Details of $6.34bn Crypto Theft
North Korea fires projectiles as Binance details a $6.34bn cyberattack. The FBI blames Pyongyang, which denies involvement, while diplomatic tensions rise.

North Korea has fired projectiles towards the sea as a dispute with Washington intensifies over a US$6.34 billion cryptocurrency theft at Binance. The FBI blames a North Korean hacking operation, but Pyongyang denies involvement. Binance has now disclosed alleged fake-recruitment and malware tactics, while Kim Yo Jong says talks with the United States remain possible only under different political conditions.
SEOUL — South Korea reported a fresh projectile launch by North Korea on Wednesday, hours after Kim Yo Jong, the sister of leader Kim Jong Un, criticised US accusations that North Korean hackers stole more than US$6 billion from cryptocurrency exchange Binance. The events have brought together military tensions, cybercrime allegations and renewed questions about whether Washington and Pyongyang can resume dialogue.

What happened in the latest launch?
South Korea’s Defence Ministry said North Korea launched an unidentified projectile towards the sea off its eastern coast. The Associated Press reported several missiles, with South Korean and US authorities examining their characteristics. The initial reporting did not establish a confirmed final number, type or flight distance for Wednesday’s launch.
This development is separate from an earlier North Korean test of strategic cruise missiles equipped with what state media described as a new cluster-munition warhead. AFP reported that North Korea’s official KCNA news agency publicised that test on Tuesday. Claims about the warhead’s performance came from North Korean state media and were not independently verified.
Binance Hack: What Is Known?
Explore the reported theft, the FBI’s attribution, Binance’s investigation and North Korea’s response.
Evidence snapshot: 4 November 2026Explore the investigation
How the attack reportedly happened
Binance says attackers used compromised developer devices, deceptive recruitment and malicious software before accessing sensitive systems.
The public account is still developing and has not been independently verified in every technical detail.
Timeline of reported developments
- June–September 2026 Binance says the compromise involved malicious software and deceptive recruitment.
- 29 October Large unauthorised cryptocurrency transfers were detected.
- 31 October The FBI attributed the theft to North Korea’s TraderTraitor operation.
- 3–4 November Further reporting described the use of compromised devices and an internal AI tool.
What remains uncertain?
- The final net financial loss after reimbursements and asset recovery.
- How much frozen cryptocurrency will ultimately be recovered.
- The extent to which all reported technical findings can be independently corroborated.
- Whether the incident will affect diplomatic negotiations.









