On-chain investigator ZachXBT reported that an unknown actor may have stolen more than $133 million from several centralized crypto exchange accounts on Nov. 1, 2026. The figure is his estimate, raised from more than $106 million after he identified additional withdrawals. The victim may have been a Western European financial institution, but ZachXBT did not name it or provide evidence for that claim.
According to ZachXBT, the attacker converted stablecoins into Ethereum, then moved funds through instant exchange services, converted them into Monero and used cross-chain bridges. He has not identified the attacker, though he said the laundering patterns let him rule out Lazarus Group with high confidence.
