---
title: "ZachXBT Names Crédit Mutuel Arkéa as Victim in $133 Million Exchange Drain"
description: "The onchain researcher alleged that the French banking group suffered a multi-day crypto theft across centralized exchange accounts."
url: https://basisdesk.news/news/zachxbt-credit-mutuel-arkea-133-million-exchange-drain
published: 2026-11-04T11:06:28.129Z
modified: 2026-11-04T11:06:28.129Z
section: Security & Hacks
author: Basis Desk Newsroom (AI-generated, source-verified)
sentiment: bearish
tickers: [USDC, USDT, ETH, BTC]
tags: [credit-mutuel-arkea, zachxbt, security-breach, centralized-exchanges, crypto-theft]
license: Quote with attribution to Basis Desk (basisdesk.news). Not financial advice.
---

# ZachXBT Names Crédit Mutuel Arkéa as Victim in $133 Million Exchange Drain

The onchain researcher alleged that the French banking group suffered a multi-day crypto theft across centralized exchange accounts.

## At a glance

- **What happened:** Investigator ZachXBT alleged French bank Crédit Mutuel Arkéa suffered a multi-day crypto drain totaling more than $133 million from centralized exchange accounts.
- **Why it matters:** The breach would place a regulated European financial institution at the center of a massive nine-figure crypto custody theft.
- **Who is affected:** Crédit Mutuel Arkéa, centralized trading platforms Kraken and Crypto.com, and institutional exchange custody desks.
- **What's next:** No next step announced.
- **Primary source:** [ZachXBT Says Exchange Accounts Drained of Over $133 Million Belonged to Crédit Mutuel Arkéa](https://unchainedcrypto.com/zachxbt-says-exchange-accounts-drained-of-over-133-million-belonged-to-credit-mutuel-arkea/) — unchainedcrypto.com

## Key points

- ZachXBT alleged that French banking group Crédit Mutuel Arkéa lost over $133 million in a multi-day drain from its centralized exchange accounts [1].
- The attacker laundered stablecoins by swapping them into $ETH, bridging chains, using instant exchanges, and converting funds into Monero [1].
- Kraken and Crypto.com restricted accounts and blocked funds linked to the transfers, while the bank has not commented publicly [1].

## Editorial remark

- **Context:** ZachXBT first flagged a $106 million drain from an unnamed EU entity on Nov. 1 before identifying an additional $27 million and attributing the target as Crédit Mutuel Arkéa on Nov. 4 [1].
- **Impact:** If confirmed, a regulated Western European bank with $235 billion in assets experienced a major nine-figure security failure directly via commercial exchange accounts [1].
- **Watch:** Public regulatory statements, formal disclosures from Crédit Mutuel Arkéa, and ongoing fund freezing actions from custodial crypto exchanges [1].

French banking group Crédit Mutuel Arkéa is allegedly the European institution behind a suspected crypto drain exceeding $133 million across accounts on centralized exchanges, according to onchain investigator ZachXBT [1]. The researcher posted the update to his Telegram channel on Nov. 4, identifying the victim as the cooperative banking entity, which holds $235 billion in assets [1]. Crédit Mutuel Arkéa did not immediately respond to a request for comment [1].

ZachXBT stated that the intrusion spanned multiple days and cautioned that total losses could surpass $133 million once over-the-counter (OTC) trade volumes are settled and tallied [1]. The update follows his earlier disclosures, which initially tracked an [unnamed European entity's missing $106 million](https://basisdesk.news/news/zachxbt-flags-suspected-106m-theft-eu-entity-monero) pulled on Nov. 1 in $USDC and $USDT [1]. After uncovering an additional $27 million in exchange withdrawals on Nov. 3, ZachXBT revised the estimated total to $133 million [1].

## Laundering Paths and Exchange Freezes

According to ZachXBT's published findings, the perpetrator converted the drained stablecoins into $ETH, routed capital through instant swap platforms, bridged assets across networks, and exchanged portions into Monero [1]. ZachXBT contended that an absence of prompt public incident disclosures allowed the attacker to launder over $30 million before countermeasures took effect [1]. He noted he remains confident the activity does not originate from North Korea's state-sponsored Lazarus Group based on the laundering patterns observed [1].

Centralized trading venues have initiated asset mitigations. Both Kraken and Crypto.com confirmed they restricted accounts or blocked addresses associated with the illicit flows [1]. At the time of writing, broader digital asset markets displayed muted reaction, with $BTC trading near $78,495 and the broader market cap at $2.63 trillion. If validated, the incident marks one of the largest direct exchange custody breaches affecting a regulated European bank [1].

## Sources

1. [ZachXBT Says Exchange Accounts Drained of Over $133 Million Belonged to Crédit Mutuel Arkéa](https://unchainedcrypto.com/zachxbt-says-exchange-accounts-drained-of-over-133-million-belonged-to-credit-mutuel-arkea/) — unchainedcrypto.com, 2026-11-04

---
Basis Desk Newsroom · AI-generated, source-verified · https://basisdesk.news/about/how-we-use-ai