All incidents

Crédit Mutuel Arkéa, a French banking group, confirmed that attackers used its own account to send fraudulent transfers to other banks, and that the money may have been converted into crypto. Onchain investigator ZachXBT flagged the theft on November 2 and estimated losses above $133 million, which CoinCentral gives as about 118 million euros. He said the figure could rise because the attack ran over several days. The bank would not confirm the amount, says it can only validate the order of magnitude, and says the loss does not threaten its financial strength. It says the attackers got in through a service provider's platform, which it has not named, that there was no entry through its online bank Fortuneo and no human error, and it calls the attack sophisticated and external. It says accounts at its federations and subsidiaries were not used, customers face no financial consequences and some transfers were only delayed. It briefly suspended some transactions, most resumed the next morning, and part of the money has been blocked. According to ZachXBT the funds went through USDC-to-ETH swaps, instant exchanges, a conversion into Monero and cross-chain bridges, and he has high confidence that North Korea's Lazarus Group is not behind it. The bank has named no suspects and has told authorities and supervisors.