ZachXBT Alleges $133M Arkéa-Linked Crypto Theft

Blockchain investigator ZachXBT alleges that more than $133 million in cryptocurrency was stolen from centralized exchange accounts linked to French banking group Crédit Mutuel Arkéa. The bank’s involvement has not been independently confirmed, and it is unclear whether the assets belonged to the bank, its customers or another party. ZachXBT first reported more than $106 million in suspicious withdrawals, then identified over $27 million in additional outflows. Earlier reporting said funds were traced from accounts at Kraken, Crypto.com and OKX, including about $63 million in stablecoins converted to Ether (ETH) within four hours. The later account says USDC and USDT were moved across services and blockchains, with some funds reportedly converted into Monero (XMR). WellWallet, Kyrrex and Wagyu were named as services that received or routed transfers, but there is no evidence they knowingly participated. ZachXBT said the total could be higher if over-the-counter transactions are included. The attacker, access method, amount frozen or recovered, and containment status remain unknown. Kraken and Crypto.com previously said they had restricted accounts or blocked funds linked to the suspected theft and that their platforms remained secure. ZachXBT said he was highly confident Lazarus Group was not responsible, but this is not a formal attribution. His claim that inadequate disclosure allowed more than $30 million to be laundered is also unverified. The alleged crypto theft raises concerns about exchange and institutional-fund security, but its direct effect on ETH, XMR or stablecoin prices is unclear.