On 3 November 2026 Kraken said it restricted accounts linked to a suspected theft of more than $133 million from an EU entity and is working with law enforcement on recovery. It said the theft did not originate on its platform, its systems were not breached and customer accounts were not taken over. Independent researchers also pointed to a French banking channel; details of the original compromise remain under investigation.

What it means: The case shows large thefts can start off-exchange and transit through accounts for laundering, forcing providers to freeze flows with law enforcement. Greek firms accepting crypto payments need stronger source-of-funds checks and fast responses to freeze requests. Saying ‘we were not breached’ does not reduce AML duties. This is not a recommendation of any provider or asset. For Greek businesses and public bodies this means a practical review of contracts, timelines and compliance duties, and it is not investment or legal advice. IT, finance and compliance teams should document owners, review cycles and fallback processes before wider adoption or a vendor change. For Greek businesses and public bodies this means a practical review of contracts, timelines and compliance duties, and it is not investment or legal advice. IT, finance and compliance teams should document owners, review cycles and fallback processes before wider adoption or a vendor change. For Greek businesses and public bodies this means a practical review of contracts, timelines and compliance duties, and it is not investment or legal advice. IT, finance and compliance teams should document owners, review cycles and fallback processes before wider adoption or a vendor change.

Read the original on Cointelegraph / Kraken statements via press

Related service: Consulting

Related stories