French online banking breached with over $133 million stolen; hackers used crypto channels for cross-chain money laundering.

France's online bank Fortuneo, a subsidiary of Crédit Mutuel Arkéa, confirmed a fraudulent network attack that bypassed its outbound transfer controls and drained more than $133 million, a recent record for a single breach at a traditional financial institution. The attackers, who had authority to initiate transfers and set payee names freely, used fake identities to pass KYC at Kraken and Crypto.com and routed funds directly to exchange custodial addresses, indicating the exchanges' own systems were not compromised. Bitquery data showed the first withdrawal from Crypto.com at 12:25 UTC on Nov. 1, followed 44 minutes later by outflows from Kraken, with ZachXBT revising the total from an initial $106 million to over $133 million in stablecoins. Between Nov. 1 and 2, roughly $63 million in USDC and USDT was swapped via Uniswap into 27,553 ETH, which was then spread across instant-exchange and cross-chain bridges, with some positions moved into Monero. The case stands out because, unlike AI-driven credential-theft campaigns at 16 South Korean institutions and other banks in Latin America and India, Fortuneo's core payment gate was directly breached, and French judicial and financial regulators are now investigating whether executive permissions were forged, while on-chain teams monitor several unidentified ETH-holding laundering routes.