Credit Mutuel Arkea Cyberattack: $133M Traced to Crypto Exchanges

Crédit Mutuel Arkéa Confirms Cyberattack and Suspends Transfers

A French banking giant with nearly $238 billion (€211.5 billion) in assets has found itself at the center of a nine-figure cryptocurrency laundering investigation. Crédit Mutuel Arkéa acknowledged the intrusion on Wednesday, explaining that attackers had executed unauthorized transactions.

In its official Nov. 4 press release, the institution stated:

“Crédit Mutuel Arkéa announces that it has been the target of a cyberattack that enabled fraudulent transactions to be carried out.”

The lender notified regulatory authorities and temporarily suspended certain transfers while security teams worked to prevent further losses. “This incident has been resolved and is now under control,” the bank declared, explaining that operations were gradually resuming after additional verification procedures.

However, at the time of writing, the institution has not disclosed an exact financial loss, leaving investigators’ estimates unconfirmed.

ZachXBT Traces $133 Million Through Crypto Exchanges

The affair broke wide open on Nov. 2 when pseudonymous blockchain sleuth ZachXBT flagged more than $106 million withdrawn from centralized exchanges by an unidentified European entity. Additional tracing uncovered approximately $27 million, pushing the suspected total beyond $133 million.

Blockchain analytics firm Bitqueryindependently mapped approximately $108.8 million in USDC withdrawals involving Kraken, Crypto.com, and OKX. Its investigation identified 178 transactions directed to 15 wallets over roughly 21 hours. The two investigators’ figures represent different tracing scopes and should not be added together.

How Did Fortuneo Funds Reach Cryptocurrency Networks?

French journalist Grégory Raymond reported that the theft allegedly originated through Fortuneo, Arkéa’s online banking subsidiary, rather than a cryptocurrency exchange breach. Fraudsters reportedly directed unauthorized fiat transfers into exchange accounts established using falsified identities. Once deposited, the money was converted into digital assets and withdrawn.

The precise method of gaining access to the banking infrastructure remains unconfirmed. Investigators identified approximately $63 million in stablecoins exchanged for 27,553 ether (ETH) during the night of Nov. 1-2, including transactions involving UniswapX.

Subsequent movements reportedly passed through instant-swap services and privacy coin monero (XMR), complicating efforts to identify the ultimate recipients. ZachXBT criticized the absence of faster disclosure, suggesting that more than $30 million potentially eligible for freezing had already moved beyond straightforward recovery channels.

Are Crédit Mutuel Arkéa Customers’ Funds Safe?

The institution says depositors will not bear the financial consequences of the attack. “Their interests are fully protected, and safeguarding their assets is an absolute priority.” Its Nov. 4 statement added that the amounts affected were “not of a nature to undermine the Group’s financial strength and soundness.”

The cooperative banking group, which serves more than 5.8 million members and customers, also warned of potential phishing attempts following the incident. Security teams continue assessing the consequences and strengthening safeguards, while the bank has pledged to provide further updates. The case illustrates how a cryptocurrency laundering operation can begin with fraudulent conventional bank transfers rather than a breach of blockchain infrastructure.