Brazil’s Central Bank Cyberattack Triggers $40 Million Cryptocurrency Money Laundering in Bitcoin and Ethereum

A complex cyber intrusion on C&M Software, a tech provider for Brazil’s Central Bank, has initiated a surge in cryptocurrency laundering, with at least $40 million in misappropriated funds redirected into Bitcoin, Ethereum, and stablecoins.

Key Takeaways:

• Cybercriminals appropriated nearly $148 million from Brazilian banks by infiltrating C&M Software’s systems.
• According to ZachXBT, at least $40 million was laundered into Bitcoin, Ethereum, and stablecoins.
• Authorities have frozen $50 million associated with the breach, yet a significant portion of the stolen cryptocurrency remains unaccounted for.

Blockchain analyst ZachXBT identified the laundering activities after tracing substantial amounts flowing through Latin American over-the-counter desks and exchanges.

This incident represents one of the most substantial financial breaches in Brazil’s history.

Hackers Target C&M, Essential Link to Brazil’s PIX Payment Network

The breach focused on C&M, a crucial intermediary that connects smaller banks and fintech companies to the Central Bank’s infrastructure, including PIX, the nation’s widely utilized instant payment system.

Brazilian authorities reported that hackers took advantage of credentials sold by João Nazareno Roque, a 48-year-old IT employee at C&M, who received approximately $2,770 for his corporate login information.

Local news source g1 Globo noted that Roque not only sold his credentials but also aided in creating a system to facilitate the theft, earning an additional payment of around $1,800.

Leveraging this internal access, hackers executed a coordinated attack early on June 30, extracting roughly 800 million reais, or nearly $148 million, from the reserve accounts of six financial institutions.

$140M HACK in Brazil – Insider Sold Access for Just $2.7K?!
ZachXBT reports a $140M breach in Brazil, where an insider allegedly sold system access for only $2.7K. Around $30–40M was funneled into crypto via LatAm OTC desks.
One of the biggest insider leaks in recent memory?… pic.twitter.com/ehMqjuQGCi

— Crypto Patel (@CryptoPatel) July 4, 2025

The fraudulent transactions went unnoticed for nearly two and a half hours. The breach was only discovered when BMP, one of the impacted institutions, reported suspicious activities.

BMP’s CEO, Carlos Benitez, stated that his bank alone incurred a loss of approximately $73.8 million but managed to recover about $29.5 million.

A Brazilian court has since frozen accounts believed to have received the stolen funds, recovering around $50 million to date.

However, the complete extent of the laundering operation is still under investigation, with substantial amounts remaining untraceable.

In the aftermath of the incident, the Central Bank restricted parts of C&M’s access to its systems while authorities worked to mitigate the impact.

Roque was apprehended on July 3, two days following the breach, and remains in custody as the investigation progresses.

Officials indicated that no retail customers experienced direct losses, as the stolen funds were confined to institutional reserve balances held at the Central Bank.

Crypto Networks Emerge as Escape Route for Crimes

The recent breach highlights escalating concerns regarding the role of cryptocurrency as a channel for traditional financial crimes.

Digital assets provide liquidity and a degree of pseudonymity that conventional cash transactions cannot offer, facilitating rapid movement of illicit funds on a large scale.

Stablecoins, in particular, have attracted the scrutiny of criminal organizations.

The Financial Action Task Force recently cautioned that stablecoins present increasing risks when utilized by illicit groups, particularly in the absence of coordinated global regulation.

Brazil’s recent heist parallels a series of notable crypto-related thefts this year, including North Korea’s record $1.46 billion ByBit hack and Chinese authorities dismantling a $136 million laundering operation that employed digital currencies for cross-border money transfers.

Nonetheless, Brazilian officials are currently working to trace the stolen funds across various blockchain networks, collaborating with international agencies to freeze assets and identify those accountable for one of the nation’s largest financial cyberattacks.

The post Brazil’s Central Bank Hack Sparks $40M Crypto Laundering in BTC, ETH appeared first on Cryptonews.