Arkéa Confirms Cyberattack as ZachXBT Traces $133 Million in Crypto Withdrawals

French banking group Crédit Mutuel Arkéa confirmed Nov. 4 that a cyberattack caused fraudulent transactions, while blockchain investigator ZachXBT linked the incident to more than $133 million in withdrawals from crypto exchange accounts.

ZachXBT identified Arkéa as the likely victim behind the withdrawals. He first flagged more than $106 million in withdrawals on Nov. 2, then added another $27 million tracked the following day, taking the total above $133 million. His tracking connected the withdrawals to accounts at Kraken, Crypto.com and OKX.

The bank has not confirmed the $133 million figure or disclosed its own losses. It said the attack was under control and customers had suffered no financial impact, although some banking services, including transfers, remained unavailable. Arkéa also paused some transactions to limit further losses and notified regulators while assessing the incident's impact.

Crypto.com said it blocked funds tied to the incident from moving through its platform and that customer funds remained safe. ZachXBT criticized the bank's disclosure timing, saying the delay meant more than $30 million in funds could not be frozen.