[REVISION HISTORY]

Crédit Mutuel Arkéa cyberattack and fund theft

4 recorded revisions of this situation.

What changed

2026-11-05 03:41 UTC → 2026-11-05 07:11 UTC · added ~~removed~~

French banking group Crédit Mutuel Arkéa confirmed it was the victim of a cyberattack involving fraudulent operations. While the bank has not officially confirmed the specific loss amount, blockchain investigator ZachXBT estimated the theft exceeded $133 million, an increase from an initial $106 million estimate after tracing additional withdrawals. ZachXBT noted that the final figure could be even higher due to unrecorded over-the-counter activity. On-chain analysis indicated that the suspected attacker moved funds through multiple centralized exchanges, including Kraken, Crypto.com, and OKX. Reports suggested approximately $62.98 million in stablecoins was converted into ETH within a four-hour window, with funds reportedly routed through instant exchanges and cross-chain bridges before being converted into Monero to obscure the trail. Bitquery reported that this conversion involved approximately 27,553 Ether. The bank stated the incident is under control and emphasized that customers will face no financial consequences, as their interests remain protected. The attackers allegedly used the bank’s own accounts to facilitate transfers rather than accessing individual customer accounts. As a precaution, the bank temporarily suspended certain transactions and notified relevant ~~authorities.~~ authorities, including the Banque de France. Kraken has restricted accounts linked to the suspected theft and is cooperating with law enforcement. Reports suggest the fraudulent transactions may be estimated at least 150 million euros. The breach reportedly targeted the bank’s online entity, Fortuneo, rather than individual client accounts. Experts suggest the attackers may have issued transfer orders from Fortuneo accounts to send money to global recipients. ZachXBT noted that the observed laundering patterns do not match those typically associated with North Korea’s Lazarus Group.

Versions

Select a version to see what changed compared to the one before it.