Hackers behind a recent $140 million cyberattack on a Central Bank of Brazil service provider have reportedly begun laundering the stolen funds using cryptocurrencies. According to on-chain analyst ZachXBT, between $30 million and $40 million has been converted into Bitcoin (BTC), Ethereum (ETH), and Tether (USDT) through Latin American over-the-counter (OTC) desks and crypto exchanges.
The attack, which occurred on June 30, targeted C&M Software — a key payment provider for the Brazilian central banking system. The breach was facilitated by bribing an employee to disclose corporate credentials, granting unauthorized access to reserve accounts of at least six financial institutions, including BMP.
This incident mirrors tactics seen in a separate cyberattack on Coinbase, where attackers bribed customer service agents to obtain sensitive user data, affecting 69,000 accounts.
The laundering of fiat-based theft through digital assets underscores the ongoing challenge of illicit activity in the crypto sector. Despite increasing regulatory interest, such events highlight vulnerabilities in both traditional and decentralized financial systems.
Brazil has been progressively adopting cryptocurrency, with lawmakers proposing legislation earlier this year to allow investment funds to hold digital assets. However, this hack puts a spotlight on the darker side of crypto adoption, particularly its use in laundering illicit funds.
According to a recent report from blockchain security firm CertiK, crypto investors lost approximately $2.5 billion to hacks and scams in the first half of 2025 alone. The Brazil central bank breach adds to the growing list of sophisticated financial crimes involving cryptocurrency, intensifying calls for more stringent security and compliance measures within the industry.
