ZachXBT Names Crédit Mutuel Arkéa as Suspected Victim of $133M Crypto Theft
Blockchain investigator ZachXBT has named French banking group Crédit Mutuel Arkéa as the suspected victim of a crypto theft exceeding $133 million, a figure that rose from an initial $106 million report. The bank had not issued an official statement as of November 4, and exchanges including Kraken and Crypto.com have moved to restrict related accounts or funds.
Written by CoinArticle’s AI Newsroom · from 2 cited sources. How we work
What Is Alleged
Blockchain investigator ZachXBT has named Crédit Mutuel Arkéa, a French banking group with more than $235 billion in total assets, as the suspected victim of a crypto theft of more than $133 million. The bank has not confirmed the claim, and as of November 4 it had issued no official statement about the incident.
The incident first surfaced on Monday, when ZachXBT reported that an unidentified European entity had lost more than $106 million through withdrawals from centralized exchange accounts on November 1. The estimate was later raised to above $133 million after ZachXBT identified another $27 million in exchange withdrawals. According to CoinDesk's reporting, ZachXBT attributed the French bank as the entity involved; Crypto Briefing reported the same attribution as a suspicion rather than a confirmed identification.
Disputed and Unverified Figures
The reported total is itself uncertain. ZachXBT said the attack lasted several days and that the $133 million figure may understate losses, since it does not capture possible over-the-counter activity. Sources differ on how firmly the loss is attributed: Crypto Briefing presents the $133 million as a suspected loss tied to the bank, while CoinDesk frames it as a figure the bank "may have lost," a more hedged reading. Neither the bank nor an independent forensic accounting process has yet validated the amount.
How the Funds Moved
According to the on-chain trail described by ZachXBT, the suspected attacker withdrew USDC and USDT from exchange accounts, converted the stablecoins into ETH, and routed the transactions through instant exchanges including WellWallet and Kyrrex. The funds were then swapped into Monero through Wagyu and moved across multiple blockchains using bridges, a path designed to complicate tracing.
Exchange Responses
Kraken restricted the accounts associated with the incident and said its own systems and customer accounts were not compromised. Crypto.com confirmed it had blocked funds linked to the theft. OKX said it had begun reviewing the allegations. No exchange has publicly tied its own platform to a breach.
Why It Matters
For Traders
Freezes and restrictions at Kraken and Crypto.com may affect liquidity for any funds traced through those venues, while the Monero conversion makes further recovery less certain.
For Investors
A confirmed institutional theft of this size would test custody and exchange-withdrawal controls at regulated banks and raise questions about their crypto exposure.
For Builders
Routing through instant exchanges, Monero swaps and multi-chain bridges shows the value of monitoring cross-venue withdrawal patterns and bridge flows in fraud detection.
This article is for information only and is not financial advice. Read the full disclaimer.
