TheBlock
Onchain investigator ZachXBT alleges that French cooperative bank Crédit Mutuel Arkéa was the victim of a crypto theft exceeding $133 million. He first reported that an unnamed EU entity had lost more than $106 million from centralized exchange accounts, with withdrawals made in USDC and USDT. He later traced another $27 million in withdrawals and identified Arkéa as the alleged victim.
Why it matters
ZachXBT says the attack unfolded over multiple days and that the loss could be higher if over-the-counter activity is included. He also criticized the institution for allegedly allowing more than $30 million to be laundered, arguing that disclosure to EU law enforcement could have enabled funds to be frozen.
The investigator described the stolen funds moving through swaps from USDC into ETH, instant exchanges, conversion to XMR via Wagyu, and bridges across multiple chains. He said he had a high degree of confidence the attacker was not associated with North Korea's Lazarus Group.
Market impact
The allegations put attention on the security and incident-response practices of financial institutions handling digital assets, as well as the difficulty of stopping funds once they move across exchanges and chains. Arkéa has not publicly confirmed or denied the incident, and the claims have not been independently verified by the bank or authorities.
ZachXBT said the bank has approximately $235 billion in assets. The alleged theft would therefore be a serious security event, but its full scale and any effect on the institution remain unconfirmed.
Frequently asked questions
-
How did ZachXBT arrive at the alleged loss of more than $133 million?
He first reported more than $106 million withdrawn from centralized exchange accounts, then traced another $27 million in withdrawals.
-
Which assets did ZachXBT say were involved in the fund movements?
He reported withdrawals in USDC and USDT, followed by swaps from USDC into ETH and conversion to XMR via Wagyu.
-
Could the alleged loss be larger than $133 million?
ZachXBT said the total could be higher if over-the-counter activity is included.
-
What did ZachXBT say about a possible Lazarus Group link?
He said he had a high degree of confidence that the attacker was not associated with North Korea's Lazarus Group.
-
Has Crédit Mutuel Arkéa confirmed the alleged theft?
The bank has not publicly confirmed or denied the incident, and the claims have not been independently verified by the bank or authorities.
WuBlockchain
CryptoSlate
CoinDesk
Lookonchain