started · updated
Crédit Mutuel Arkéa confirms cyberattack following suspected $133M theft
The French banking group Crédit Mutuel Arkéa has confirmed it was the victim of a cyberattack involving fraudulent transactions. While the bank has not officially confirmed the exact amount lost, blockchain investigator ZachXBT estimates the theft exceeds $133 million, noting that the figure could be higher due to unrecorded over-the-counter activity.
Reports indicate the attackers targeted the bank’s own funds, specifically through its online subsidiary Fortuneo, rather than individual client accounts. The bank stated that client assets remain unaffected and that the situation is currently under control. As a precaution, the group temporarily suspended certain transactions to secure operations.
On-chain analysis suggests the stolen funds, which included stablecoins, were converted into Ethereum and subsequently into the privacy-focused cryptocurrency Monero to complicate tracking. Major cryptocurrency exchanges, including Kraken, Crypto.com, and OKX, have taken various measures such as restricting accounts or investigating associated funds. ZachXBT noted that the laundering patterns observed do not match those typically associated with North Korea’s Lazarus Group.
Entities
Bitquery · Circle · Crypto.com · Crédit Mutuel Arkéa · European Union · Fortuneo · Kraken · Lazarus Group · OKX · ZachXBT
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 5 SOURCES] ZachXBT alleged that a large financial institution in Western Europe is covering up the exploitation. logos-pres.md · bitcoinke.io · www.cryptobreaking.com · cointelegraph.com
- [● 13 SOURCES] The theft involved withdrawals from multiple centralized exchanges. btcwires.com · coindoo.com · coinpedia.org · decrypt.co · logos-pres.md · +7 more
- [● 7 SOURCES] ZachXBT stated with high confidence that the Lazarus Group was not responsible for the theft. coinpedia.org · decrypt.co · logos-pres.md · en.bitcoinsistemi.com · bitcoinke.io · +2 more
- [● 6 SOURCES] Only $3.74 million in USDC remained that could potentially be frozen by Circle. logos-pres.md · coindoo.com · bitcoinke.io · coinedition.com
- [● 11 SOURCES] ZachXBT estimated the suspected crypto theft from an unidentified EU entity has risen to more than $133 million. ambcrypto.com · coinedition.com · cryptobriefing.com · bitcoinke.io · logos-pres.md · +5 more
- [● 12 SOURCES] The attacker converted approximately $62.98 million in stablecoins into 27,553 ETH. btcwires.com · coindoo.com · coinpedia.org · logos-pres.md · coinedition.com · +5 more
- [● 7 SOURCES] The attacker used Monero (XMR) to help obscure funds. en.bitcoinsistemi.com · coinpedia.org · decrypt.co · logos-pres.md · bitcoinke.io · +2 more
- [● 11 SOURCES] The victim is an unidentified entity in the European Union. btcwires.com · coindoo.com · en.bitcoinsistemi.com · coinpedia.org · decrypt.co · +4 more
- [● 2 SOURCES] Crédit Mutuel Arkéa implemented the RiskShield platform from INFORM.
- [● 2 SOURCES] The platform processes around eight million transfers per month in real time.
- [● 2 SOURCES] Arkéa offers fraud prevention services to other French retail banks.
- [● 2 SOURCES] The platform processes around 70 million card transactions per month in real time.