Arkéa has spoken up: it confirmed it was attacked, that fraudulent transactions took place, and that the incident is now under control.

But it hasn’t confirmed the amount: it neither confirmed $133 million nor said whether the funds lost were fiat or crypto. The only amount confirmed on-chain remains the one reported by Bitquery: $108.8 million in USDC withdrawn from Kraken, Crypto.com, and OKX within 21 hours.

It says customers’ interests are fully protected, that it has notified regulators, and that it temporarily suspended some trading. It has admitted to the incident, but hasn’t disclosed the full figures.