Asked at the 2 November regular briefing about attribution of the roughly $6.3 billion Binance theft to North Korea and President Trump's remarks, Chinese MFA spokesperson Mao Ning said only 'we are not aware of the relevant situation'. Bloomberg reported the same day that TRM Labs and Chainalysis point to TraderTraitor, and that Binance says a software engineer's laptop was compromised, giving access to withdrawal-processing systems. The suggestion that AI tools were used for reconnaissance or social engineering is attributed to 'some experts' and is not an investigative finding.

From developments to evidence and analysis

Background

No explicit relationship is recorded.

Evidence

No explicit relationship is recorded.

Follow-ups / later versions

No explicit relationship is recorded.

Related questions

Cite this article

AI & Security Observatory(2026-11-02)「中国外交部、Binance窃取の北朝鮮関与に「状況を把握していない」 ブルームバーグは侵入経路を技術者のノートPCと報道」『AI & Security Observatory』、第1.0版、最終更新2026-11-03。https://ai-security-observatory.org/ja/brief/brief-20261103-19/

AI & Security Observatory (2026-11-02). China's MFA says it is 'not aware of the situation' on North Korea's alleged role in the Binance theft; Bloomberg reports an engineer's laptop as the entry point . AI & Security Observatory, version 1.0. Updated 2026-11-03. https://ai-security-observatory.org/en/brief/brief-20261103-19/

Version 1.0 · Publication date 2 Nov 2026 · Updated 3 Nov 2026

Revision history
  1. Earlier revisions have not been recorded.