UPDATED WED 04 NOV · 13:16 UTCLIVE
SecurityHigh

Two major crypto security incidents: Crédit Mutuel Arkéa and Wintermute

French bank Crédit Mutuel Arkéa confirmed a $133M+ crypto hack, with $108.8M in USDC traced by ZachXBT. A separate thread explains how Wintermute's $160M loss stemmed from a weak vanity-address key.

What we know

CoinDesk reports the stolen USDC was withdrawn from Kraken, Crypto.com and OKX accounts over 21 hours and swapped to ETH to avoid stablecoin freezes. An account on X explains that Profanity's 32-bit seed left only about 4.3B possible keys, so Wintermute's vault admin key was crackable.

How the story developed

04 Nov · 13:16 UTC

French bank Crédit Mutuel Arkéa confirmed a $133M+ crypto hack, with $108.8M in USDC traced by ZachXBT. A separate thread explains how Wintermute's $160M loss stemmed from a weak vanity-address key.

04 Nov · 11:16 UTC

ZachXBT revealed a fraud of at least $133M against Crédit Mutuel Arkéa, laundered in crypto, and a French reporter has reconstructed how a network drained Fortuneo accounts.

04 Nov · 08:16 UTC

ZachXBT revealed that Crédit Mutuel Arkéa was hit by a fraud of at least $133M laundered via crypto; French journalist Grégory Raymond is reporting on it.

04 Nov · 07:16 UTC

ZachXBT reportedly flagged a $133M+ crypto theft at Crédit Mutuel Arkéa, after a $106M+ loss at a European institution on Nov 1.

Sources

@CoinDesk

“Crédit Mutuel Arkéa confirms it was hacked for $133M+ in crypto”

View post →

By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.