Crédit Mutuel Arkéa Suffers $133 Million Loss from Exchange Compromise
Crédit Mutuel Arkéa experienced a significant security breach in early November 2026, resulting in losses exceeding $133 million. The incident involved the compromise of centralized exchange accounts and subsequent laundering of funds.
On-chain investigator ZachXBT reported that French bank Crédit Mutuel Arkéa had its centralized exchange accounts compromised in early November 2026. The breach led to losses exceeding $133 million, primarily withdrawn as USDC and USDT. The bank has not publicly confirmed the incident, which raises concerns about the security of its digital assets.
Following the initial compromise, the stolen funds were rapidly swapped to ETH and bridged across chains. This indicates a sophisticated mechanism was employed to obscure the trail of the funds. The laundered assets were then converted into privacy-focused cryptocurrencies like Monero, further complicating any potential recovery efforts.
The incident highlights vulnerabilities in the management of centralized exchange accounts, particularly for institutions with significant assets. While the specific blockchain involved is not stated, the use of multiple chains for laundering suggests a well-coordinated effort to evade detection. The on-chain record remains unverified as the bank has not disclosed further details regarding the addresses involved.