theblock.coarticleFrench bank Crédit Mutuel Arkéa exploited for over $133 million, ZachXBT says
Crédit Mutuel Arkéa, a French cooperative bank, allegedly lost over $133 million in a multi-day theft in early November 2026, according to on-chain investigator ZachXBT. The funds left centralized exchange accounts as USDC and USDT. The attacker swapped them to ETH, used instant exchanges, converted to XMR via Wagyu and bridged across chains. The bank has not confirmed. ZachXBT says the attacker is likely not Lazarus Group.
TL;DR ZachXBT alleges a $133M theft from French bank Crédit Mutuel Arkéa's exchange accounts, laundered via ETH swaps, XMR and bridges, unconfirmed by the bank.
Organisations named here
- Crédit Mutuel Arkéa
Technologies named here
- Wagyu
- USDC
- Tether
- Ethereum
- Monero
- ZachXBT
- Crédit Mutuel Arkéa (French cooperative bank; centralized exchange accounts, over $133 million stolen in early November 2026, unconfirmed by the bank)
- Instant exchanges
Techniques named here
- Blockchain tracing
Concepts named here
- Attribution
Threat actors named here
- Lazarus Group
- Unnamed attacker behind the Crédit Mutuel Arkéa theft (ZachXBT says it is likely not Lazarus Group)
Related in Threat Intel
huntress.comwriteupReverse Engineering the Six Stages of MacSync Stealer and RAT
huntress.comwriteupAI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
blog.talosintelligence.comtoolIntroducing CAIRN: Frontier tracking for AI-integrated malware (Cisco Talos)
huntress.comwriteup