Hackers steal $140M from Brazilian central bank reserve accounts via partner breach
2025/07/04 16:00Hackers siphoned about R$800 million ($140 million) from six reserve accounts connected to Brazil’s central bank after breaching São Paulo-based software vendor C&M Software on June 30, according to blockchain investigator ZachXBT and reports from local news outlets.
Police said C&M employee João Nazareno Roque sold his corporate login for R$15,000 ($2,770) and later developed a secondary access tool for an additional R$10,000 ($1,850), giving attackers direct access to the vendor’s infrastructure.
Investigators traced unauthorized instructions that moved funds from the reserve accounts held at the Central Bank of Brazil for interbank settlement into commercial bank accounts tied to over-the-counter (OTC) desks and regional exchanges.
ZachXBT estimated that between $30 million and $40 million of the stolen funds had already been swapped for major digital assets, including Bitcoin, Ethereum, and USDT.
On-chain analysis teams and Brazilian prosecutors are coordinating wallet freezes while attribution work continues.
Central bank and vendor response
The central bank ordered all institutions that routed through C&M to disconnect immediately after the breach and cleared the firm to restore service two days later, stating that critical systems remained intact.
C&M commercial director Kamal Zogheib told Reuters that the attack relied on fraudulent client credentials rather than a code flaw and confirmed cooperation with the Federal Police and São Paulo investigators.
BMP, a banking platform provider hit in the raid, told local media that only its reserve balance was affected, and customer deposits remained untouched.
Law enforcement officials have frozen R$270 million ($49.8 million) while tracking additional flows and searching for at least four accomplices cited in preliminary warrants.
Roque remained in custody in São Paulo as of July 3. Police allege that he rotated his mobile phones every two weeks to avoid being monitored.
Laundering route through Latin America
Transaction records reviewed by ZachXBT and independent researchers indicate that the attackers structured transfers across multiple exchanges in Brazil, Argentina, and Paraguay, then utilized OTC brokers to settle into crypto within three hours of the initial breach.
Sources who prefer to remain anonymous told CryptoSlate that the attackers found it challenging to buy crypto with the stolen money in Brazilian OTC desks, as most of the largest ones raised red flags due to the large amounts.
Brazil’s Federal Police declined to specify which platforms processed the swaps but said exchange operators have begun freezing balances tied to flagged addresses.
The central bank has not disclosed whether additional vendors will face new connection requirements but signaled that the instant payment rail PIX and reserve account interfaces may receive further controls.
The probe continues under federal supervision, with investigators prioritizing the recovery of funds and identifying the remaining organizers.
The post Hackers steal $140M from Brazilian central bank reserve accounts via partner breach appeared first on CryptoSlate.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Anthropic's Core Concern: Revenue Can Be Withdrawn at Any Time, but Computing Power Costs Are Locked in for up to 20 Years
Zheshang Securities believes that Anthropic's revenue is mainly based on usage-based billing, with remaining performance obligations covering only about 5.1 months of annualized revenue, while compute power costs are already locked in with $895.4 billion in irrevocable commitments, some extending as far as 2045. Revenues can be reduced at any time, but costs are non-exitable, creating a highly asymmetric maturity gap between the two—this is the company's real core constraint.
Triple Pressure from the Federal Reserve, Treasury, and Congress; Goldman Sachs: Liquidity Crisis May Occur in 2027
Goldman Sachs warns that the reserve ratio of bank assets has dropped to around 11%, only slightly above the crisis trough of 2019. In the second half of 2027, a deadlock in debt ceiling negotiations will force the Treasury to rebuild the TGA, triggering a "perfect storm" of a sharp drop in reserves and a surge in T-bill supply; combined with stalled money market fund buying, this will create a huge liquidity black hole. The Federal Reserve could be forced into the awkward position of lowering interest rates and launching large-scale bond purchases to rescue the market.
U.S. Stock IPO Preview | From Losses to Net Profit of 5.46 Million: The "Three-Dimensional" Platform Business Strategy with a Taste for Golf
Crossing the break-even line, the growth inflection point has arrived.
Crypto prices
More
