NK denial doesn’t change the on-chain picture Kim Yo-jong called the FBI’s attribution of the ~$6.3B Binance theft to North Korea “absurd rhetoric and nothing new,” saying Washington is trying to pin every major cyber incident on the DPRK. That’s the standard response out of Pyongyang. The data side looks different. TRM Labs and Chainalysis had already tied the exploit to TraderTraitor (the same cluster linked to the $1.5B Bybit hack) with high confidence before the FBI formalized it. Funds were moved across multiple chains in a tight window, then largely swapped into ETH — the pattern analysts have seen from this group before. The FBI is now asking exchanges and DeFi platforms to block the known addresses. A denial from KCNA doesn’t move the wallets. The tracking still points the same way, and the conversion/laundering activity is what everyone is watching.