A complicated cyberattack concentrating on Brazil’s central financial institution reserve accounts has resulted within the theft of over $140 million (R$800 million), a lot of which was swiftly funneled via cryptocurrency channels.
The breach, which occurred on June 30, stemmed from compromised entry to São Paulo-based fintech supplier C&M Software program, in line with data from blockchain investigator ZachXBT and Brazilian authorities.
The scheme started when João Nazareno Roque, a C&M worker, allegedly offered his login credentials for roughly $2,770 and later developed a second entry mechanism for an extra $1,850, giving attackers full management over the seller’s infrastructure. This entry enabled unauthorized fund transfers from six reserve accounts held on the Central Financial institution of Brazil, transferring the cash into accounts linked to regional crypto exchanges and OTC desks.
Investigators estimate that $30–$40 million of the stolen funds have already been transformed into Bitcoin, Ethereum, and USDT. Transaction data reveal the hackers routed funds throughout exchanges in Brazil, Argentina, and Paraguay, counting on OTC brokers to transform stolen fiat into crypto inside hours.
Authorities have frozen R$270 million ($49.8 million) thus far and are working to hint remaining belongings. Roque stays in custody, with legislation enforcement alleging that he regularly modified telephones to evade monitoring.
Crypto Laundering Raises Crimson Flags
Whereas laundering efforts had been speedy, sources say a number of Brazilian OTC platforms refused to course of the massive transactions, triggering alarms. Alternate operators have since begun freezing wallets tied to flagged addresses, although Federal Police declined to verify which platforms had been concerned.
In response, the central financial institution disconnected C&M-linked establishments quickly and is reviewing future entry controls. Officers recommend that fee programs like PIX could endure tighter regulation.
The federal probe is ongoing, with Brazilian authorities prioritizing fund restoration and dismantling the felony community behind one of many nation’s largest monetary cyberheists up to now.