Crédit Mutuel Arkéa Faces Major Crypto Security Breach
Crédit Mutuel Arkéa, a prominent French banking group, has confirmed a significant cyberattack affecting its cryptocurrency accounts, resulting in fraudulent transactions. The bank reassured customers that the situation is under control and that they will not incur any financial losses from the incident.
Estimated Losses from the Attack
Blockchain researcher ZachXBT estimates that the total losses attributed to this attack could surpass a staggering $133 million. Initially, the reported losses were calculated at $106 million, but further investigation revealed an additional $27 million withdrawn from centralized cryptocurrency exchanges, raising concerns that the figure could climb even higher if over-the-counter transactions are factored in.
Response and Actions Taken
Although the bank acknowledged the cyberattack, it did not disclose specific details regarding the total amount stolen or the nature of the assets involved, whether fiat or cryptocurrencies. In an effort to mitigate further damage, Crédit Mutuel Arkéa has temporarily halted specific transactions and notified the relevant regulatory authorities.
Impact on Cryptocurrency Exchanges
According to analytics firm Bitquery, withdrawals totaling approximately 108.8 million USDC from accounts on major exchanges such as Kraken, Crypto.com, and OKX were tracked between November 1 and 2. These funds were reportedly spread across multiple wallets, much of which was converted to Ether—highlighting a method that bypasses freezing by centralized issuers.
In response to the breach, Crypto.com stated they successfully blocked transfers linked to the fraudulent activities through their platform. OKX also noticed irregularities in a corporate client account related to the attack, prompting them to freeze the account and alert the client. Both exchanges confirmed that their other user accounts remained unaffected. As of yet, Kraken has not issued a comment on the incident.
Investigation and Attribution
The method through which the attacker accessed the cryptocurrency accounts is still under investigation. ZachXBT has indicated, however, that evidence suggests the North Korea-associated Lazarus Group is not involved, based on the patterns of the transactions. This conclusion is drawn from analytical research, rather than an official probe.
As the full scope of this breach continues to unfold, it spotlights the ongoing security challenges in the cryptocurrency sector, particularly concerning large financial institutions.
