Overview
- Crédit Mutuel Arkéa said on Wednesday that a cyberattack allowed fraudulent transfers, that the incident has been contained, and that customer assets were not affected.
- On‑chain investigators traced roughly $133 million moved from centralized exchanges as USDC and USDT into ether and privacy conversions, with portions routed into Monero and cross‑chain bridges that make recovery harder.
- The bank reported attackers accessed its systems through a third‑party service provider and used the group’s own account to send transfers to other banks before funds were moved into crypto.
- Exchanges such as Kraken and Crypto.com have restricted linked accounts and blocked some funds, and the Paris public prosecutor has opened a criminal inquiry into an alleged organized attack.
- The case highlights supply‑chain risk and the limits of freezing fiat‑pegged stablecoins once funds are swapped to non‑freezable assets, a dynamic likely to draw closer scrutiny from regulators and stablecoin issuers.