Crédit Mutuel Arkéa Named in $133M Heist

ZachXBT Links French Bank to Heist

On-chain investigator ZachXBT named French banking giant Crédit Mutuel Arkéa as the institutional entity behind a $133M crypto theft executed over multiple days. Public on-chain transaction records confirm the bank holds over $235B in total assets while managing substantial cross-border capital flows. The disclosure expands upon an initial estimate of $106M extracted from CEX accounts through suspicious withdrawal patterns. Stolen assets were converted rapidly into USDC and USDT before shifting across ETH swaps and privacy protocols.

Bitquery blockchain analysis traced $108.8M in USDC withdrawals leaving Kraken, Crypto. com, and OKX to 15 distinct wallets over a 21-hour period. Investigators found that 11 of these target addresses previously received funds from the exact same platforms. This structural pattern indicates attackers exploited trusted withdrawal configurations tied directly to compromised victim accounts. Funds across 332 secondary wallets were subsequently monitored as laundering routes intensified across decentralized bridges.

Laundering Routes Bypass Lazarus Group Signatures

Forensic telemetry monitored by Bitquery showed much of the stolen USDC converted swiftly into ETH across decentralized trading venues. As of 13:27 UTC on November 3, approximately $61M remained on Ethereum inside wallets controlled by the primary exploit actor. Additional tracing identified $28M routed directly to four separate addresses missing from the original list of 11 trusted destinations. Investigators confirmed that available laundering indicators point away from North Korea-linked actors.

Tether successfully froze approximately $1.14M in USDT by November 2 following automated alerts sent to exchange compliance desks. Meanwhile, Circle failed to freeze any portion of the remaining $2.53M in USDC sitting idle on the open ledger. Bitquery telemetry also flagged a separate transfer of 396 ETH moving directly into a Kraken deposit address on November 3. ZachXBT warned that the total stolen sum will likely climb higher once over-the-counter desk activity is fully audited.

Exchange Breaches Pile Up Across Industry

The French banking exploit coincides with a wave of security compromises hitting multiple global exchanges and digital asset custodians. Brazil exchange Mercado Bitcoin suffered a separate breach resulting in the loss of almost $40M in customer capital balances. Mercado Bitcoin executives assured local depositors that reserve balances remained unaffected despite the unauthorized asset outflows. BitMart founder Sheldon Xia confirmed a simultaneous exchange breach on November 2, though internal estimates rated the total stolen amount as small.

The cumulative theft volume adds intense pressure to compliance teams monitoring high-frequency bridge transactions and cross-chain liquidity pools. Exchange order-book depth monitored by market makers showed immediate volatility spikes following the public disclosures. Traders pulled liquidity from affected platforms as counterparty risk concerns escalated across derivative venues. Security audits continue across centralized and decentralized infrastructure.