A suspected theft from an unidentified European Union entity has been estimated at more than $133 million. The most unsettling part may be what did not move. Blockchain investigator ZachXBT said on Tuesday that his estimate had risen after identifying another $27 million withdrawn in connection with the incident. The estimated total loss: more than $133M. But roughly $78.3M apparently remained in place rather than being moved onward. That distinction matters. Stolen assets are often consolidated and moved away from the compromised address to make tracing harder. If a large portion remains where it was found, possible explanations include continued holding, delayed movement or an incomplete attempt to move the funds. The public information does not establish which explanation applies. For European traders, the practical takeaway is not to treat “funds still at the scene” as proof that the loss has been stopped or recovered. Digital asset movements are permissionless, and a dormant balance can still be moved later. The additional $27M also shows why headline theft figures can change as investigators identify more transfers. In an incident involving more than $133M, early estimates should be treated as a working snapshot rather than a final accounting. The identity of the alleged EU entity has not been publicly established, and no conclusion should be drawn about the organisation’s operations or responsibility without verified information. One large balance. Two withdrawal figures. And $78.3M that has apparently stayed put — for now. Follow verified on-chain updates, not rumours. Not financial advice.