ZachXBT links $133 million crypto exchange theft to French bank Crédit Mutuel Arkéa
On-chain sleuth ZachXBT reported that French banking group Crédit Mutuel Arkéa lost more than $133 million from centralized exchange accounts in a multi-day crypto exploit.
On-chain investigator ZachXBT has identified French banking group Crédit Mutuel Arkéa as the victim of a multi-day crypto drain exceeding $133 million. The bank, which oversees an estimated $235 billion in assets, reportedly saw funds drained from its accounts at centralized cryptocurrency exchanges.[1][2][4][9][11]
ZachXBT first flagged the breach on Nov. 1, when roughly $106 million in USDC and USDT was pulled from an unidentified European entity across several exchanges, including Kraken, Crypto.com, and OKX. Two days later, he traced an additional $27 million in withdrawals, bringing the known total to more than $133 million. He noted that total losses could end up higher once over-the-counter trading activity is factored in, while stating with high confidence that the perpetrator is not North Korea's state-sponsored Lazarus Group.[1][2][3][6][7]
To prevent stablecoins from being frozen, the attacker swapped the assets into ether, utilized instant exchange services, bridged across different blockchains, and shifted portions into the privacy cryptocurrency Monero. ZachXBT criticized a lack of swift incident disclosure, asserting that the delay allowed more than $30 million to be laundered before preventative measures could be taken. Crypto.com and Kraken have since restricted accounts or blocked assets linked to the theft, while later reports indicated the French institution confirmed an attack occurred.[1][4][5][7][8][10]
Key facts
- ZachXBT identified French bank Crédit Mutuel Arkéa as the victim of a crypto theft exceeding $133 million.
- Crédit Mutuel Arkéa holds approximately $235 billion in assets.
- The exploit began with $106 million pulled on Nov. 1, followed by another $27 million traced on Nov. 3.
- The drained assets consisted of USDC and USDT withdrawn from exchanges including Kraken, Crypto.com, and OKX before conversion into ETH and Monero.
- ZachXBT reported high confidence that the perpetrator is not North Korea's Lazarus Group and suggested losses may be higher once OTC activity is counted.
- Crypto.com confirmed it blocked funds associated with the theft, and Kraken also restricted related accounts.
Sources · 11 sources
- UN
UnchainedArticle ·
ZachXBT Says Exchange Accounts Drained of Over $133 Million Belonged to Crédit Mutuel Arkéa Onchain investigator ZachXBT has alleged that the European financial institution he says lost more than $133 million in a suspected crypto drain is Crédit Mutuel Arkéa , a French banking group. In an update posted to his Telegram channel , ZachXBT wrote that the victim “is allegedly Credit Mutuel Arkea, a French bank with $235B in assets.” He added that “the attack on the bank occurred for multiple days,” and said he suspects “the amount stolen is larger when accounting for OTC activity,” a reference to over-the-counter trades that settle away from public order books. Crédit Mutuel Arkéa did not immediately respond to a request for comment from Unchained. Get Unchained’s crypto news in your inbox with the free Unchained Daily newsletter . Why It Matters If the allegation holds, a regulated European bank, not a crypto-native firm, would sit at the center of a nine-figure crypto theft drawn from its own accounts at centralized exchanges. It would also put a spotlight on when a bank holding funds at crypto exchanges is expected to tell the public it was hit, the question ZachXBT raised in his Nov. 3 update, when he said the lack of a “proper incident disclosure” let more than $30 million be laundered. From ‘EU Entity’ to a Named Bank The naming is the third step in a thread ZachXBT started on Nov. 2, when he flagged $106 million pulled on Nov. 1 from an unnamed EU entity’s accounts at several centralized exchanges, in USDC and USDT . He said then he was highly confident the thief was not North Korea’s Lazarus Group , pointing to how the funds were being laundered. A day later he had traced another $27 million in exchange withdrawals and raised his tally to $133 million , writing that his working theory was a large Western European financial institution and suggesting the loss was being kept quiet. He has argued that the silence let the attacker launder more than $30 million before anyone could move to freeze it. Per his earlier posts, the stablecoins were swapped into ETH, run through instant exchange services, partly converted to Monero and bridged across chains. Kraken and Crypto.com, two of the exchanges the withdrawals were traced to, have since restricted accounts or blocked funds tied to the theft, according to statements they gave Cointelegraph . Related Listen: Is THORChain a Money Laundering Service? A Chinese Crime Boss Says Yes The post ZachXBT Says Exchange Accounts Drained of Over $133 Million Belonged to Crédit Mutuel Arkéa appeared first on Unchained .
Open source - TB
The BlockArticle ·
French bank Crédit Mutuel Arkéa exploited for over $133 million, ZachXBT says ZachXBT said he has a 'high degree of confidence' that the attacker is not associated with North Korea's Lazarus Group.
Open source - LS
Laura Shin@laurashinPost on X ·
ZachXBT says the Crédit Mutuel Arkéa loss could exceed $133 million once OTC activity is counted. The French bank has not publicly confirmed or denied an attack. https://t.co/mO73iWzt7V
Open source - WB
Wu Blockchain@WuBlockchainPost on X ·
ZachXBT: French Bank Crédit Mutuel Arkéa Allegedly Lost Over $133M in Crypto Theft On-chain investigator ZachXBT disclosed on November 4 that the financial institution allegedly affected by a crypto theft exceeding $133 million is Crédit Mutuel Arkéa, a French banking group with approximately $235 billion in assets. ZachXBT previously reported that an EU-based entity was suspected of losing more than $106 million from multiple centralized exchange accounts on November 1. The suspected attacker withdrew funds in USDC and USDT before swapping assets into ETH and privacy coin XMR and transferring funds across multiple blockchains.
Open source - DE
DecryptArticle ·
ZachXBT Names French Bank Crédit Mutuel Arkéa as Alleged Victim of $133M Crypto Theft The onchain investigator says the theft is being "covered up," and that a lack of disclosure let more than $30 million be laundered.
Open source - CO
Cointelegraph@CointelegraphPost on X ·
🚨 UPDATE: ZachXBT says the EU financial institution hit in a $133M+ exploit is allegedly French bank Crédit Mutuel Arkéa. He suspects the true losses run higher once OTC activity is counted. https://t.co/Aw6GlWUoij
Open source - CO
CoinDesk@CoinDeskPost on X ·
LATEST: French bank Crédit Mutuel Arkéa confirms it was hacked for $133M+ in crypto, with @zachxbt tracing $108.8M in $USDC withdrawn from @Krakenfx, @cryptocom and @OKX accounts over 21 hours, then converted to $ETH to avoid stablecoin freezes.
Open source - CO
CoindeskArticle ·
ZachXBT names French bank Crédit Mutuel Arkéa as suspected victim of $133 million crypto theft Blockchain sleuth ZachXBT says the French bank may have lost more than $133 million from crypto exchange accounts. Crypto.com confirms it has blocked funds linked to the theft.
Open source - TB
The Block@TheBlockCoPost on X ·
BREAKING: ZachXBT says the suspected EU financial institution that was exploited for more than $133 million is French bank Credit Mutuel Arkea. https://t.co/q2inh9TZh0
Open source - SI
Solid Intel 📡@solidintel_xPost on X ·
INTEL: French bank Crédit Mutuel Arkéa confirms attack as over $133 million is reported at stake
Open source - AN
Aggr News@AggrNewsPost on X ·
ENTITY THAT GOT HACKED FOR $130M WAS CREDIT MUTUEL ARKEA, A FRENCH BANK WITH $235B AUM: ZACHXBT
Open source