Arbitrum’s Security Council secured approximately $30 million in assets linked to the October 29 Binance exploit, using emergency upgrade powers to move funds out of an attacker-linked address without obtaining its private key. The October 30 intervention moved 8,425 ETH and 74.56 million ARB into a holding address controlled through ArbitrumDAO governance. The assets remain frozen rather than returned to Binance, with a DAO vote required before they can be released. Arbitrum said no other users’ funds or applications were…

ZachXBT Alleges $133M Crypto Theft at Crédit Mutuel Arkéa

Blockchain investigator ZachXBT has named Crédit Mutuel Arkéa as the alleged victim of a cryptocurrency theft exceeding $133 million, expanding an investigation into suspicious withdrawals from multiple centralized exchange accounts.

The November 4 disclosure identified the French banking group after earlier alerts referred only to an unnamed European institution. ZachXBT described Arkéa as holding approximately $235 billion in assets and said the suspected attack continued over several days, with potential additional losses involving over-the-counter transactions.

The bank’s involvement has not been independently confirmed. No public response addressing the allegation was identified at publication, and the disclosures do not establish whether the affected assets belonged to the institution, its customers or another party.

Additional Withdrawals Push Estimated Losses Above $133 Million

ZachXBT’s initial alert on November 2 identified more than $106 million in suspected losses from exchange accounts the previous day. The funds were withdrawn as USDC and USDT before being moved through multiple services and blockchains.

He subsequently identified another $27 million-plus in exchange withdrawals, bringing his estimate above $133 million. Some withdrawals occurred after his initial public warning, indicating that the suspected outflows continued after the incident had attracted attention.

The investigator published 11 suspected theft addresses in the original alert and four additional addresses in the follow-up. He did not name the exchanges holding the affected accounts or explain how the attacker obtained access.

The suspected laundering involved swapping USDC for ether, transferring funds through instant exchanges and converting assets into Monero. ZachXBT named WellWallet and Kyrrex among the services receiving transfers and identified Wagyu as a route for conversions into XMR.

Those observations describe the movement of funds; they do not establish that the services knowingly participated in the theft.

“I suspect the amount stolen is larger when accounting for OTC activity,” ZachXBT wrote in the update naming Arkéa. He did not provide a separate estimate for those transactions.

ZachXBT Criticizes Disclosure as Attacker Remains Unidentified

ZachXBT also alleged that inadequate disclosure allowed more than $30 million to be laundered that European law enforcement could otherwise have frozen. He described a possible cover-up as his working theory, rather than an established finding.

Neither deliberate concealment nor the amount that authorities could have intercepted has been independently verified. The $30 million figure concerns funds allegedly moved during the incident, not a separate loss to add to the $133 million estimate.

The attacker remains unidentified. ZachXBT said he was highly confident that Lazarus Group was not responsible, citing multiple laundering indicators. He did not publicly detail those indicators, and his assessment is not a formal law-enforcement attribution.

The disclosures follow Mercado Bitcoin’s suspension of services after a security breach and the FBI’s attribution of the Binance theft to North Korea’s TraderTraitor operation. ZachXBT’s posts provide no evidence connecting the suspected Arkéa incident to either case.

The latest update does not establish how the exchange accounts were compromised, whether unauthorized access has been contained or how much cryptocurrency has been frozen or recovered.

Justin Sun Seeks $264K in WLFI Sanctions Over UAE Ties

Arbitrum Secures $30M in Binance Hack Funds, Vote Pending

Bogdan is a genuine outside-the-box thinker. His philosophy is never to settle and always evolve. Since the very first moment, he heard of Bitcoin, he knew it would revolutionize the world.

VIEW AUTHOR

More author posts

ZachXBT Alleges $133M Crypto Theft at Crédit Mutuel Arkéa

Blockchain investigator ZachXBT has named Crédit Mutuel Arkéa as the alleged victim of a cryptocurrency theft exceeding $133 million, expanding an investigation into suspicious withdrawals from multiple centralized exchange accounts. The November 4 disclosure identified the French banking group after earlier alerts referred only to an unnamed European institution. ZachXBT described Arkéa as holding approximately $235 billion in assets and said the suspected attack continued over several days, with potential additional losses involving over-the-counter transactions. The bank’s involvement has not…

Mercado Bitcoin Says $38M Hit, $11.2M in Assets Frozen

Mercado Bitcoin, one of Brazil's largest cryptocurrency exchanges, has suspended operations following a security breach involving approximately $38 million in digital assets, with $11.2 million already frozen as investigators trace suspicious transfers across multiple blockchains. The incident occurred on November 2, when attackers allegedly gained control of wallets associated with the exchange and transferred substantial cryptocurrency holdings to newly created addresses. Mercado Bitcoin initially suspended deposits and withdrawals before temporarily taking its platform offline. The company maintained that customer assets…

BTCPay Server Warns of Wallet Drains, Urges Shutdown

BTCPay Server has issued an emergency security warning after receiving reports of attackers draining Bitcoin from hot wallets hosted on its payment infrastructure, urging operators to shut down their servers while investigators determine the extent of the compromise. The November 1 alert initially applied to all installations, but subsequent findings narrowed the suspected attack vector to BTCPay Server versions 2.4.1 and earlier. The project has received no credible reports of hot wallet thefts involving its latest 2.4.7 release. The total…

Chainalysis Breach Exposes Customer Data, AI Tools Cited

Blockchain analytics firm Chainalysis has confirmed a cybersecurity breach that exposed customer information after an external attacker used advanced agentic techniques to gain unauthorized access to its internal systems. The incident, disclosed on October 30, compromised user IDs, full names, email addresses and organizational roles associated with customer accounts. However, Chainalysis said its investigation had found no evidence that sensitive investigation records, authentication credentials or active sessions were accessed. The company has notified customers, engaged external cybersecurity specialists and begun…

Binance Wallets See $2.77B Outflows, Hack Unconfirmed

Binance-linked cryptocurrency wallets recorded an estimated $2.77 billion in outgoing transfers across five blockchains on October 29, triggering concerns about a potential security breach as blockchain researchers examined unusually large movements from exchange-associated addresses. The reported outflows drew immediate attention after several high-value Ethereum transactions were traced to a receiving address outside Binance's publicly labeled wallet infrastructure. However, neither a hack nor any loss of customer funds has been confirmed, and the purpose of the transactions remains unclear. The $2.77…

Kraken Parent Payward Plans First CFTC-Regulated Perpetual Markets on Hyperliquid

Kraken parent Payward is moving forward with plans to become the first CFTC-regulated operator of perpetual futures markets on Hyperliquid, combining the decentralized exchange's blockchain infrastructure with federally supervised trading, clearing and brokerage services. The October 26 development introduces a permissioned version of Hyperliquid's HIP-3 framework, allowing regulated operators to restrict market access to approved customers. Payward intends to deploy the contracts through its Bitnomial derivatives businesses, while NinjaTrader Clearing will manage customer accounts. The arrangement remains subject to regulatory…

Publish your own article

Guest post article. Guaranteed publishing with just a few clicks

START PUBLISHING ADVERTISE WITH US

Browse categories

Explore trending topics in the crypto community right now.

Bitcoin

JPMorgan Forecasts 10% Annual Bitcoin Returns, Outpacing Stocks and Gold

JPMorgan Asset Management has introduced a 10% annualized return forecast for Bitcoin in its 2027 Long-Term Capital Market Assumptions, placing the cryptocurrency ahead of U.S. large-cap equities, gold and several traditional asset classes over the next 10 to 15 years. Released on October 19, the 31st edition marks JPMorgan's first formal inclusion of Bitcoin in its long-term return projections, extending the bank's institutional investment framework into cryptocurrency. The 10% base-case assumption exceeds the bank's 7.5% annual forecast for U.S. large-cap...

Bitcoin and Ethereum Plunge as Hot U.S. CPI Sparks Nearly $1 Billion in Crypto Liquidations

Bitcoin and Ethereum extended their losses on October 15 after hotter-than-expected U.S. inflation data rattled financial markets, triggering nearly $1 billion in cryptocurrency liquidations as leveraged traders faced another wave of forced selling. Bitcoin fell toward $80,000, trading around $81,000 after retreating from levels above $83,000 before the inflation release. Ethereum suffered heavier losses, dropping more than 6% over 24 hours to approximately $2,365. The sell-off followed the October 14 release of September's Consumer Price Index (CPI), which showed annual...

Standard Chartered Launches Bitcoin and Ethereum Trading for Wealthy UAE Clients

Standard Chartered has launched cryptocurrency trading for affluent clients in the United Arab Emirates, allowing eligible investors to buy and sell Bitcoin and Ethereum directly through their existing bank accounts. The October 14 launch marks the bank's first cryptocurrency trading offering for wealth clients globally and the first such service introduced by an international bank in the UAE. The offering has received licensing approval from Dubai's Virtual Assets Regulatory Authority (VARA) and initially targets customers classified as Professional Investors. Transactions,...

Strategy Buys 250 Bitcoin and Repurchases $192M in STRC as Holdings Reach 848,250 BTC

Michael Saylor's Strategy has acquired another 250 Bitcoin and repurchased approximately $192 million of its STRC preferred stock, continuing to deploy capital across its cryptocurrency treasury and securities repurchase programs. The October 12 corporate disclosure puts Strategy's total holdings at 848,250 BTC as of October 11, alongside approximately $5.5 billion in combined U.S. dollar reserves and deployable cash. The latest Bitcoin purchase cost $21.5 million, with $21 million funded through sales of MSTR common shares and another $500,000 drawn from...

Ethereum

Abstract Ethereum Layer 2 to Shut Down on December 15 With $47.9M Still Secured

Abstract, the consumer-focused Ethereum Layer 2 backed by Pudgy Penguins parent Igloo Inc., will shut down on December 15, 2026, ending a nearly three-year effort to build a blockchain around consumer crypto. Users must move their assets before the deadline through Abstract’s official Migration Hub or native bridge. Assets remaining on the network after December 15 will become inaccessible. The native bridge currently carries an expected withdrawal delay of roughly three hours. The October 6 wind-down notice also warned users...

Ledger Patches Ethereum Signing Flaw Before Researchers Disclose It

Ledger has patched a vulnerability in its Ethereum hardware-wallet app that could allow a malicious dApp to replace a transaction during the approval process while the device continued showing users the transaction they originally reviewed. Security firm TestMachine disclosed the signature-substitution flaw on August 21 after reproducing it on Ledger hardware. Ledger had already shipped Ethereum app version 1.22.2 on August 12, with its release history listing security fixes for the update. Malicious dApp Could Change the Transaction Before Signing...

Jesse Pollak Pushes Back On Coinbase ETH Selling Criticism, Points To 150K ETH Treasury

Base creator Jesse Pollak has pushed back against criticism that Coinbase is selling ETH while benefiting from Ethereum, pointing to the exchange’s roughly 150,000 ETH corporate position and years of investment across the network. Pollak argued that Coinbase has held about 150,000 ETH through multiple market cycles, while describing the company as the largest ETH holder outside dedicated digital asset treasury companies by a wide margin. Coinbase’s latest regulatory filing backs up the scale of that position. The company held...

Tornado Cash Phishing Frontend Drains 1,010 ETH From User

A crypto user lost 1,010 ETH after following an old Tornado Cash bookmark into a phishing frontend that captured the private withdrawal credentials needed to access the deposited funds. The victim deposited the ETH into legitimate Tornado Cash contracts, but the malicious interface obtained the private note generated during the process. The attacker then used those credentials to withdraw the assets within roughly 12 hours without compromising the underlying Tornado Cash smart contracts. Phishing Frontend Targeted Private Withdrawal Notes Tornado...

Trading

5 Best Crypto APIs for Trading Bots in 2026

A crypto trading bot is a chain of dependencies. It reads a position, prices it, decides, places an order, and confirms settlement. Every one of those steps is an API call, and a failure at any single step stops the strategy. The provider choice shapes what a bot can actually do more than the strategy logic does. The common mistake is searching for one API that covers everything. No such API exists in 2026. Market data providers do not route...

Best Prediction Markets Alternatives: Outpoll, Limitless, Myriad, Manifold

Polymarket and Kalshi helped turn prediction markets into a mainstream trading category, but neither platform fits every trader. Access varies by country, market selection can lean heavily toward certain topics, and the tools available for entering, managing, and automating positions differ sharply across platforms. The strongest alternatives are not identical copies. Some emerging prediction markets platforms focus on professional order controls, some concentrate on fast crypto and financial markets, and others use onchain infrastructure or play-money forecasting. Users unfamiliar with...

How to Get a Funded Crypto Trading Account in 2026 Step by Step

A funded crypto trading account gives a trader access to more notional capital after they prove they can follow a firm’s risk rules. The usual route starts with a paid crypto prop firm challenge that requires a profit target without breaching daily or overall loss limits. Passing is not only about making money. Drawdown control, minimum trading days and rule compliance determine whether the account survives. The evaluation fee can be lost, and crypto prop firms use different account models,...

How To Trade Tokenized Stock Perps: Leverage, Funding And Risks

Tokenized stock perps allow traders to take long or short exposure to companies, ETFs and equity indexes through crypto-native derivatives markets. Positions can use stablecoin collateral, remain open without an expiry date and continue trading when the main stock exchange is closed. The trader receives price exposure, not ownership of the referenced shares. The interface often looks identical to a crypto perpetual futures market. The risk does not. A stock-linked contract can remain active overnight, through weekends and during holidays...

Tech

Trade.xyz Restores GitBook Docs After Security Incident

Trade.xyz, the Hyperliquid-based trading platform offering perpetual futures tied to stocks, indexes and commodities, has restored its technical documentation following unauthorized activity on its GitBook pages, while maintaining a warning against clicking links as investigators assess the breach. The November 2 incident affected the platform's documentation infrastructure, with the team restoring its previous version by 9:15 a.m. Eastern Time (14:15 UTC). Trade.xyz has not reported any confirmed losses, trading interruptions or disruption to on-chain settlements, although it has yet to...

Mercado Bitcoin, one of Brazil's largest cryptocurrency exchanges, has suspended operations following a security breach involving approximately $38 million in digital assets, with $11.2 million already frozen as investigators trace suspicious transfers across multiple blockchains. The incident occurred on November 2, when attackers allegedly gained control of wallets associated with the exchange and transferred substantial cryptocurrency holdings to newly created addresses. Mercado Bitcoin initially suspended deposits and withdrawals before temporarily taking its platform offline. The company maintained that customer assets...

Kraken Restores Spot, Derivatives Trading After Outage

Cryptocurrency exchange Kraken restored trading services on October 30 after a widespread connectivity outage disrupted access to its spot and derivatives platforms for approximately one hour, preventing some customers from placing and managing orders. The incident began at 02:42 UTC and affected web and mobile applications alongside REST, WebSocket and FIX connections used by automated trading systems. Kraken confirmed that the disruption was resolved at 03:42 UTC, returning its affected trading services to normal operation. The outage occurred amid heightened...

Binance Hack: $6.3B Affected, $3B in Assets Frozen

Binance has confirmed a major security breach affecting approximately $6.3 billion in digital assets, with nearly $3 billion frozen as the cryptocurrency exchange works with blockchain networks, stablecoin issuers and law enforcement to contain what could become the largest crypto theft on record. The October 30 disclosure follows suspicious withdrawals totaling an initial $2.77 billion across five blockchains the previous evening. Binance's preliminary investigation indicates that attackers may have compromised a DevOps engineer's laptop, gained access to an internal service...