Crédit Mutuel Arkéa Named as Suspected Victim of $133 Million Exchange Withdrawals

Von Coinvote

Veröffentlicht am November 4, 2026 - 11:23 UTC | 4 Minuten Lesezeit

Onchain investigator ZachXBT has named French banking group Crédit Mutuel Arkéa as the suspected victim of a theft he puts at more than $133 million. Kraken and Crypto.com say they restricted related funds, but the bank has not confirmed any loss.

A French bank is named, but has not confirmed a loss

Pseudonymous onchain investigator ZachXBT said on Wednesday that Crédit Mutuel Arkéa, a French banking group, is the alleged victim of a crypto theft above $133 million. Cointelegraph reported that he described the institution as holding $235 billion in assets and said it was allegedly exploited over several days.

The bank's involvement has not been independently verified. Cointelegraph contacted Crédit Mutuel Arkéa for comment and had received no reply by the time it published. ZachXBT has also not explained the way the attackers reached the funds, so the method of the breach remains unknown.

CoinDesk framed the claim in similar terms, saying the bank could have lost over $133 million out of accounts held at crypto exchanges. It added that Crypto.com has confirmed blocking funds linked to the theft.

How the loss estimate grew over three days

The figure did not arrive all at once. According to Cointelegraph, ZachXBT's first report came on Monday, when he flagged over $106 million of questionable outflows from centralized trading platforms.

The next day, Tuesday, he lifted his estimate above $133 million, having located a further $27 million in withdrawals. Some of those transfers happened after his first warning, which suggests the activity was still under way when the alert went out.

ZachXBT also said the true total may be higher. In his words, "I suspect the amount stolen is larger when accounting for OTC activity." Over-the-counter trades settle privately between parties rather than on a public order book, so they are harder to trace and were not part of the earlier estimates.

The numbers reported so far

The reporting rests on a small set of figures, and each one comes from a single named origin.

Over $106 million of questionable outflows from centralized platforms, ZachXBT's first estimate on Monday, per Cointelegraph.
About $27 million in further withdrawals found on Tuesday, lifting the estimate to more than $133 million.
Approximately $63 million in stablecoins converted into Ether within four hours, according to blockchain analytics firm Bitquery, as relayed by Cointelegraph.
$235 billion in assets for Crédit Mutuel Arkéa, as ZachXBT described the group.

What the exchanges and analysts say

Bitquery traced withdrawals from accounts at Kraken, Crypto.com and OKX, Cointelegraph reported. The firm found that roughly $63 million in stablecoins was swapped into Ether (ETH) in a four-hour window. Converting stablecoins into ETH is a common step after a theft, because stablecoin issuers can freeze tokens while ETH cannot be frozen in the same way. Cointelegraph did not say that this was the motive here.

Ether is the second-largest crypto asset by market capitalization at $284.68 billion, according to CoinGecko, and it trades about $11.30 billion in volume over 24 hours. That depth explains why large swaps can be executed quickly, though none of the outlets links the episode to any price move.

Kraken and Crypto.com told Cointelegraph that they had restricted accounts or blocked funds tied to the suspected theft. Both said their own platforms remained secure. The Defiant reported that Kraken said neither its own infrastructure nor its clients' accounts were breached, and that it is cooperating with law enforcement to try to recover the funds. The Defiant's headline also describes the case as a suspected theft in the European Union.

Where the outlets agree and where they differ

CoinDesk, The Block and Cointelegraph attribute the estimate of more than $133 million to ZachXBT; The Defiant's available headline and summary do not attribute the figure to anyone. The sources differ mainly in what they add. Cointelegraph carries the timeline, the Bitquery tracing and the OTC caveat. CoinDesk adds Crypto.com's confirmation that it blocked funds, and The Defiant adds Kraken's statement on law enforcement.

The Block contributes the only comment on who may be responsible. It reported that ZachXBT is highly confident the attacker has no connection to the North Korean hacking group Lazarus. The coverage available for that report is limited to its headline and summary, so the evidence behind that assessment is not described here.

The wording also varies slightly. The Block's headline says the bank was exploited, while CoinDesk and Cointelegraph use "may have lost" and "alleged". Readers should treat the stronger phrasing as ZachXBT's claim, not an established finding.

What to watch next

The first open question is whether Crédit Mutuel Arkéa responds. A statement from the bank would settle whether the accounts are its own and whether the $133 million figure is accurate. The second is how the attackers obtained access, which no outlet has reported.

The third is how much money can be recovered. Kraken and Crypto.com have said they restricted funds, and Kraken says it is working with law enforcement, but none of the outlets reports a recovered amount. OKX's response was not covered in the reporting reviewed here, although Bitquery traced withdrawals from accounts there.

Teams and holders who use exchange accounts for treasury operations may also want to review withdrawal controls and account access settings. The reporting does not say these were the weak point in this case.

Market snapshot

Asset	Price	24h	7d	Market cap
Ethereum (ETH)	$2,330	+2.8%	-1.9%	$284.68 billion

CoinGecko data as of 2026-11-04 (UTC).

FAQ

Who is the alleged victim of the $133 million crypto theft?

ZachXBT named the French banking group Crédit Mutuel Arkéa as the suspected victim. The bank has not confirmed this, and Cointelegraph reported that it received no response to its request for comment.

Which exchanges were involved?

Bitquery traced withdrawals from accounts at Kraken, Crypto.com and OKX. Kraken and Crypto.com told Cointelegraph they restricted accounts or blocked funds, and both said their platforms remained secure.