Crédit Mutuel Arkéa confirms it has been targeted in a cyberattack; customer assets remain unaffected.

On November 4 that, according to Cryptoast, Fortuneo, an online bank under France's Crédit Mutuel Arkéa group, suffered a large-scale fraud attack. Attackers initiated transfers by spoofing recipient identities and funneled the funds into cryptocurrency exchange accounts opened using false identities. On-chain investigator ZachXBT previously estimated that the amount involved exceeded $133 million, and believes the actual losses may be even higher.

According to blockchain analytics firm Bitquery, approximately $62.98 million in stablecoins were swapped for 27,553 ETH via UniswapX within four hours. The funds were subsequently routed through multiple cross-chain and instant-swap services, with some converted into the privacy coin Monero (XMR). Kraken has restricted the implicated accounts, while Crypto.com has also taken steps to freeze related funds; both platforms stated that their systems and customer accounts were not compromised.

On November 4, Crédit Mutuel Arkéa confirmed to Cryptoast that it had been attacked and fraudulent transactions had occurred. The group stated that the situation has been contained, certain transactions have been paused to prevent further fund transfers, and customer assets remain unaffected while investigations continue. The bank has not yet disclosed the exact amount of actual losses. ZachXBT, however, noted that if OTC transactions are factored in, the actual losses could increase further.