ZachXBT Names Crédit Mutuel Arkéa as Victim in $133 Million Exchange Drain
The onchain researcher alleged that the French banking group suffered a multi-day crypto theft across centralized exchange accounts.
At a glance
- What happened
- Investigator ZachXBT alleged French bank Crédit Mutuel Arkéa suffered a multi-day crypto drain totaling more than $133 million from centralized exchange accounts.
- Why it matters
- The breach would place a regulated European financial institution at the center of a massive nine-figure crypto custody theft.
- Who is affected
- Crédit Mutuel Arkéa, centralized trading platforms Kraken and Crypto.com, and institutional exchange custody desks.
- What's next
- No next step announced.
- Primary source
- unchainedcrypto.com: ZachXBT Says Exchange Accounts Drained of Over $133 Million Belonged to Crédit Mutuel Arkéa
Key points
- ZachXBT alleged that French banking group Crédit Mutuel Arkéa lost over $133 million in a multi-day drain from its centralized exchange accounts 1.
- The attacker laundered stablecoins by swapping them into $ETH, bridging chains, using instant exchanges, and converting funds into Monero 1.
- Kraken and Crypto.com restricted accounts and blocked funds linked to the transfers, while the bank has not commented publicly 1.
French banking group Crédit Mutuel Arkéa is allegedly the European institution behind a suspected crypto drain exceeding $133 million across accounts on centralized exchanges, according to onchain investigator ZachXBT 1. The researcher posted the update to his Telegram channel on Nov. 4, identifying the victim as the cooperative banking entity, which holds $235 billion in assets 1. Crédit Mutuel Arkéa did not immediately respond to a request for comment 1.
ZachXBT stated that the intrusion spanned multiple days and cautioned that total losses could surpass $133 million once over-the-counter (OTC) trade volumes are settled and tallied 1. The update follows his earlier disclosures, which initially tracked an unnamed European entity's missing $106 million pulled on Nov. 1 in $USDC and $USDT 1. After uncovering an additional $27 million in exchange withdrawals on Nov. 3, ZachXBT revised the estimated total to $133 million 1.
Laundering Paths and Exchange Freezes
According to ZachXBT's published findings, the perpetrator converted the drained stablecoins into $ETH, routed capital through instant swap platforms, bridged assets across networks, and exchanged portions into Monero 1. ZachXBT contended that an absence of prompt public incident disclosures allowed the attacker to launder over $30 million before countermeasures took effect 1. He noted he remains confident the activity does not originate from North Korea's state-sponsored Lazarus Group based on the laundering patterns observed 1.
Centralized trading venues have initiated asset mitigations. Both Kraken and Crypto.com confirmed they restricted accounts or blocked addresses associated with the illicit flows 1. At the time of writing, broader digital asset markets displayed muted reaction, with $BTC trading near $78,495 and the broader market cap at $2.63 trillion. If validated, the incident marks one of the largest direct exchange custody breaches affecting a regulated European bank 1.
Sources
- [1] ZachXBT Says Exchange Accounts Drained of Over $133 Million Belonged to Crédit Mutuel Arkéa — unchainedcrypto.com, November 4, 2026
Written by Basis Desk's newsroom system from the primary sources above and machine-verified against them before publication. Market figures marked "at the time of writing" come from live exchange data. Report an error: corrections@basisdesk.news · corrections policy.
The Daily Brief, in your inbox at 07:00 ET
Five stories, the numbers that moved, what to watch. Three minutes. No hype, no advice, unsubscribe in one click.
Get the big crypto stories first
A few alerts a day at most: major breaking news and the morning brief. Switch off anytime.
Not financial advice. Basis Desk publishes information, not recommendations. Crypto assets are volatile and you can lose what you invest.