Over $106M in Crypto Stolen From EU Entity? ZachXBT Tracks Attacker’s Laundering Trail

Blockchain investigator ZachXBT flagged a suspected theft of over $106 million from multiple centralized exchange accounts linked to an unnamed European Union entity on November 1. He said funds were withdrawn in USDC and USDT, swapped into ETH, moved through instant exchange services WellWallet and Kyrrex, converted to XMR via Wagyu, and bridged across chains; he was highly confident it was not North Korea’s Lazarus Group. Separately, Brazilian exchange Mercado Bitcoin confirmed a security incident after over $40 million in suspicious outflows across 10 networks; customers were unaffected and deposits and withdrawals were suspended. BTCPay Server was investigating attacks on wallets in versions 2.4.1 and older after attackers reportedly gained admin access, with no credible reports on version 2.4.7.