---
id: "CMP-202611-rci64b"
kind: "campaign"
aliases: []
title: "French bank Cr\u00e9dit Mutuel Ark\u00e9a reportedly robbed of about $133M (118M+ euros), laundered through crypto exchanges into Monero; bank has not confirmed"
severity: "medium"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: [{"name": "Cr\u00e9dit Mutuel Ark\u00e9a", "fixed": [], "vendor": "Cr\u00e9dit Mutuel Ark\u00e9a"}]
ecosystems: []
tags: ["campaign", "early-warning"]
not_affected_if: []
published_at: null
first_seen_at: "2026-11-04T10:23:44+00:00"
updated_at: "2026-11-04T10:24:55+00:00"
sources: [{"source": "analyst", "url": null, "first_seen_at": "2026-11-04T10:23:44+00:00"}]
---

# French bank Crédit Mutuel Arkéa reportedly robbed of about $133M (118M+ euros), laundered through crypto exchanges into Monero; bank has not confirmed

Le Télégramme, citing on-chain investigator ZachXBT and a source close to the case, reports that hackers took about $133M (more than 118M euros) in ordinary money (fiat) out of Crédit Mutuel Arkéa. The money was moved through many mule accounts to crypto exchanges including Crypto.com, converted to USDC/USDT, then ETH, and swapped through WellWallet and Kyrrex into Monero. ZachXBT first flagged more than $106M of withdrawals from an 'unidentified European entity' on Sunday 2026-11-01 and raised the figure to $133M on 2026-11-03. Asked for comment, the bank said it was 'not able to confirm at this stage'. ZachXBT rules out North Korea's Lazarus with high confidence. How the attackers got in, the start date, and any effect on customer accounts or data are all unknown.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- :Crédit Mutuel Arkéa affected ? fixed ?

## How to check

Unknown: no attack method or indicators have been published. Crédit Mutuel Arkéa customers (including Crédit Mutuel de Bretagne, Crédit Mutuel du Sud-Ouest and Fortuneo, all part of the Arkéa group) should check their accounts for transfers they did not make. Treat any calls, texts or emails that mention this incident and ask for logins, codes or a 'secure transfer' as likely fraud.

## Fix

Nothing official yet; the bank has not confirmed the incident. Customers: contact the bank only through its official app or the phone number on your card, never through a link or number in a message. Exchanges and stablecoin issuers: watch for flows tied to ZachXBT's published addresses.

## Timeline

- 2026-11-04T10:23:44+00:00 analyst

## Documents

- [describes] French bank Crédit Mutuel Arkéa victim of a hack of more than 118M euros https://news.ycombinator.com/item?id=50363333
- [describes] Le Crédit Mutuel Arkéa victime d'un piratage de plus de 118 millions d'euros https://www.letelegramme.fr/economie/toute-l-actualite/le-credit-mutuel-arkea-victime-dun-piratage-de-plus-de-118-millions-deuros-7151898.php

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_