In brief
A TRM Labs expert urged South Korea to coordinate more closely with the U.S. and Japan on sanctions against North Korea after a alleged $6 billion cryptocurrency theft from Binance. Korean officials said they were reviewing options but had yet to finalise sanctions, while the U.S. FBI confirmed North Korean hackers were involved.
Ari Redbord, global head of policy at U.S. blockchain‑intelligence firm TRM Labs, wrote to Yonhap on Thursday urging South Korea to deepen cooperation with the United States and Japan on sanctions, citing a recent $6 billion theft from Binance that he said was carried out by North Korean hackers.
Theft figures were released by the U.S. Federal Bureau of Investigation, which said the cyber‑attack was boasted by North Korea’s North Korean Advanced Ransomware Attack Group (NARAG). Pyongyang, however, has rejected the charge, calling the FBI’s claim a “grave political provocation” and suspecting intelligence manipulation.
Redbord said sanctions must be both unilateral and multilateral, and that “pressure means multilateral and unilateral sanctions, diplomatic pressure on North Korea and its Chinese enablers, and action against the Chinese money‑laundering networks Pyongyang depends on.” He added that timing is critical: “In cases like this, speed is everything. The window to freeze and recover stolen funds is hours and days, not months.”
South Korean financial regulators convened cryptocurrency exchanges shortly after the Binance incident, Redbord noted, to review security protocols. He was critical of the pace and coordination of efforts, saying “the speed and coordination of efforts to block illicit transactions” were insufficient.
The Korean Unification Ministry released a statement saying it had not yet begun “discussions on possible sanctions over the Binance incident” because the government had not fully established the circumstances surrounding the alleged theft.
Meanwhile, the Foreign Ministry said internal reviews were underway over possible additional measures, including unilateral cyber sanctions. It added that no decision had yet been made.
In a note to Yonhap, Redbord remarked that “additional sanctions can help, but only if they go after the laundering.” He further noted the need for targeted sanctions against the laundering networks that convert stolen digital assets into conventional currency.
South Korea’s record on cryptocurrency has been cautious. After Binance’s loss, the banks and exchanges were asked to tighten AML/KYC procedures. The Korean exchange regulator confirmed it had opened a “national reserve” for cryptocurrency sanctions, a move critics say is a sign of seriousness about the matter.
US officials have pushed for a joint diplomatic push. A former U.S. State Department official, who asked to remain unnamed, said “the U.S. is ready to lift sanctions if South Korea demonstrates a concrete plan.” The U.S. also teased potential “digital‑asset embargos” against Chinese firms linked to North Korean laundering.
North Korea’s official envoy in Seoul has defended the nation’s approach, saying it “has no involvement in any criminal activity” and that “courtesy and cooperation are the way forward.” He has, however, welcomed the UN Security Council’s call for harsher measures against North Korea’s illicit economic streams.
With this incident, the Korean government signs a possible turning point. Sanctions over the past decade have focused on traditional industries, but Redbord’s call signals an increased focus on the tech‑driven front. Whether Seoul will act swiftly remains to be seen. Korean officials said they will keep engaging the US and Japan.
Until a decision is made, the only known plan is to watch the 'window' to freeze assets, as Redbord advised, giving Seoul and partner states a limited period to block illicit flows before they inevitably find alternative routes.
