-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

0xCERT Security Advisory 0xCERT-2026-0315
============================================================

Advisory-ID:  0xCERT-2026-0315
Severity:     Critical
Published:    2026-11-01T00:00:00.000Z
Updated:      2026-11-06T07:23:32.530Z
Chains:       Ethereum
URL:          https://www.0xcert.com/advisory/0xCERT-2026-0315

Title: Unidentified EU Institution $133M Crypto Theft

Summary
- -------
About $133 million in stablecoins was drained from an unidentified European entity's exchange accounts over one weekend, in a suspected owner-side key compromise.

Details
- -------
Summary
About $133 million in stablecoins was drained from an unidentified European entity's exchange accounts over one weekend, in a suspected owner-side key compromise.

Incident
- - Victim: Unidentified EU Institution
- - Date (UTC): 2026-11-01
- - Estimated loss: $133.0M
- - Chain(s): Ethereum
- - Attack type: private key compromise
- - Funds status: stolen

Recommended actions
- - If you use Unidentified EU Institution, move funds to a fresh wallet with a new seed phrase once the vendor confirms the root cause
- - Update the wallet software only from official sources
- - Beware of follow-on phishing: ignore unofficial "refund", "recovery", or "claim" links and DMs; use the project's verified channels only

Source & attribution
Full analysis on Blockchain Breaches, 0xCERT's incident archive: https://www.blockchainbreaches.com/en/breaches/unidentified-eu-institution-2026. Primary sources: https://cointelegraph.com/news/zachxbt-flags-suspected-106m-crypto-theft-as-solana-bot-faces-possible-786k-drain ; https://cointelegraph.com/news/zachxbt-eu-crypto-theft-133m-alleged-cover-up ; https://www.coingabbar.com/en/crypto-exchange-theft-zachxbt-133m-laundering.

References
- ----------
- - https://www.blockchainbreaches.com/en/breaches/unidentified-eu-institution-2026
- - https://cointelegraph.com/news/zachxbt-flags-suspected-106m-crypto-theft-as-solana-bot-faces-possible-786k-drain
- - https://cointelegraph.com/news/zachxbt-eu-crypto-theft-133m-alleged-cover-up
- - https://www.coingabbar.com/en/crypto-exchange-theft-zachxbt-133m-laundering

Verify with the 0xCERT OpenPGP key: https://www.0xcert.com/pgp.asc
Fingerprint: 5F94 3ED1 1E50 CF31 2128  C493 CCC7 D9EC 9415 723D

-----BEGIN PGP SIGNATURE-----

wrsEARYKAG0FgmruKK8JEDe9Tbcr+ZxrRRQAAAAAABwAIHNhbHRAbm90YXRp
b25zLm9wZW5wZ3Bqcy5vcmeQ03v4/DOwNcTxxVgb6Bg1hublmCHzyAbz4nLe
wE/cgBYhBGCkkFZbJcT5QWu27ze9Tbcr+ZxrAAC3RgEAgyhoIgCpGEqhZ5KG
zi4zzqp0jAd4X3RG7A8LdbN3wYEA/RU+Vudm07MeAwqpcJIj1YRcpxofV4zk
RSyH3+DzA+8H
=Srhy
-----END PGP SIGNATURE-----