European Union Entity Loses $106 Million in Centralized Exchange Crypto Theft
An unidentified entity in the European Union lost more than $106 million in cryptocurrency on November 1, 2026, after accounts held at multiple centralized exchanges were compromised, cryptonews.net reported. Blockchain investigator ZachXBT publicized the multi-million dollar breach on November 2, tracking a complex series of transactions as the suspected attacker moved the stolen capital across multiple blockchains and privacy-focused platforms.
Suspected Attacker Converts Stablecoins to Ether and Monero
The unauthorized withdrawals initially involved U.S. dollar-pegged stablecoins USDC and USDT, according to cryptonews.net. German-language coverage from de.cryptonomist.ch corroborated the asset movements, noting that the suspect rapidly swapped the stablecoins for ether and routed funds through instant-exchange platforms such as WellWallet and Kyrrex. The attacker subsequently converted a portion of the assets into Monero using Wagyu, a privacy-focused cryptocurrency that obscures transaction details to complicate on-chain tracking.
Centralized Accounts Compromised Across Multiple Platforms
While ZachXBT published 11 wallet addresses tied to the security breach, the investigator did not disclose the identity of the victimized entity, the specific exchanges involved, or the method used to gain unauthorized access to the accounts. The victimized entity remains unverified by independent auditors. However, the report explicitly ruled out one prominent suspect while detailing the operational path of the drained funds through decentralized protocols and instant exchangers.
Stablecoin Issuers Freeze Limitations and Asset Recovery Obstacles
The choice of exit assets highlights a deliberate effort to evade centralized freezes. While stablecoin issuers retain the technical capability to freeze USDC and USDT tokens, ether and Monero operate on networks that lack central issuing authorities, preventing freezes by single entities. Instant-exchange services and privacy coins further hinder recovery efforts by breaking the direct link between the compromised exchange accounts and the final destination wallets.
Frequently Asked Questions About the European Union Crypto Heist
Which organization or individual lost the $106 million?
Blockchain investigator ZachXBT did not name the victim, describing the target only as an EU-based entity which could include a corporation, trading firm, or investment fund.
How did the attacker move the stolen funds off the exchanges?
The suspect withdrew funds in USDC and USDT, exchanged them for ether, routed transactions through instant services like WellWallet and Kyrrex, and converted portions into Monero.
Can the stolen cryptocurrency be recovered by authorities or issuers?
While stablecoin issuers can freeze USDC and USDT, the assets converted into ether and privacy-focused Monero cannot be frozen by a central authority, complicating recovery efforts.
Related reading