The BTCPay Server thefts over the weekend split wallets into two groups. The stolen coins came from hot wallets, where the spending keys sit on the server itself, on machines running versions from July or earlier. Wallets whose keys were held off the server, including hardware wallets, were unaffected. That's from BTCPay's own incident report. Bitquery traced about $1.6 million to the two addresses BTCPay named, and says sweeps were still arriving when it stopped counting. The Bitcoin network did exactly what it was told. The weak point was a key on an internet-facing server that had gone about three months without a security fix. For any institution with Bitcoin exposure, the custody question stays the same: where do the keys live, and what can reach them?

💥 A $6 billion hack has put crypto’s Wall Street challenge on trial, according to Bloomberg. The digital-asset industry has sought to remove intermediaries, delays, and controls in money movement by pitching faster transactions, final settlement, and fewer middlemen.

A major exchange incident can affect more than the platform itself it can shake user confidence across the wider crypto space. That’s why I think breakdowns of what happened, what followed, and how the market infrastructure responded are worth paying attention to. Good to see SimpleFX covering the bigger picture, not just price movements. @SimpleFXcom

Crédit Mutuel Arkéa says it has resumed almost all operations after a cyberattack that enabled fraudulent transfers. The bank says attackers accessed its systems through the platform of a service provider, not through customer accounts or its Fortuneo subsidiary. Customer funds were not affected, according to Arkéa, although some transfers were delayed while the incident was contained. The attackers reportedly used Arkéa’s own account to send funds to other banks, where they may have been converted into crypto through specialised platforms. Some funds have been blocked, recovery efforts are ongoing, and the bank says it is still assessing the final financial impact. The incident is another reminder that the weakest link in financial infrastructure is often not the bank itself, but a third-party provider connected to it.

A French bank just confirmed it was hacked — and the money moved through crypto. Crédit Mutuel Arkéa said a cyberattack enabled fraudulent transfers from its own accounts. The incident is contained, and client assets were not touched. On-chain investigator ZachXBT puts the suspected loss at more than $133 million. The bank has not confirmed that figure — it says the final amount is still under review and below $133 million. The funds were reportedly swapped from USDC into ETH, then routed across chains and into Monero. A traditional bank, hit through a third-party provider, laundered through crypto rails in days. Bitcoin trades near $80,400.

Japanese banks guarantee deposits up to a maximum of 10 million yen, and while account management is generally free, it is at your own risk. By entrusting your assets to a bank through custody, you are placing trust in that custodian bank. However, this trust structure may already be broken.

🚨 LATEST: French banking group Crédit Mutuel Arkéa confirms a cyberattack that allowed hackers to make fraudulent transfers from the bank's own account, with funds potentially converted into cryptocurrency through specialized platforms. The bank says customer accounts and assets were not affected. It has contained the attack, blocked part of the funds and is working to recover the rest. The bank has not confirmed the reported €118 million ($133 million) loss, but acknowledged the amount involved was of that order of magnitude. #CréditMutuelArkéa #CyberAttack #France #Banking

CZ issues urgent warning: Fake Trust Wallet phishing site—pay attention to website suffixes. CZ shared a warning about a fake Trust Wallet website, emphasizing that the ".cam" domain is not ".com," and urging users to be vigilant against phishing attacks. The fraudulent site mimics the Trust Wallet interface, tricking users into connecting their wallets to “review transfers,” while scanning their balances via a backend API. Always carefully verify the official website URL before use, and avoid clicking on suspicious links to protect your wallet and funds.