{"id":70460,"date":"2026-03-31T13:17:55","date_gmt":"2026-03-31T13:17:55","guid":{"rendered":"https:\/\/crowdfundjunction.com\/blog\/zachxbt-crypto-news-bitcoin-news\/"},"modified":"2026-03-31T13:17:55","modified_gmt":"2026-03-31T13:17:55","slug":"zachxbt-crypto-news-bitcoin-news","status":"publish","type":"post","link":"https:\/\/crowdfundjunction.com\/blog\/zachxbt-crypto-news-bitcoin-news\/","title":{"rendered":"ZachXBT \u2013 Crypto News Bitcoin News"},"content":{"rendered":"

(Originally posted on : Bitcoin News )<\/b>
\n<\/p>\n

\n

Kraken Account Targeted in $18M Scam as Funds Bridge to Bitcoin<\/span><\/h2>\n

Blockchain<\/span> investigator ZachXBT<\/a> flagged the incident on March 31, 2026, via his Telegram channel, pointing to a coordinated theft followed by rapid asset transfers designed to obscure the trail. The attacker reportedly gained access through tactics commonly tied to phishing or impersonation schemes, rather than exploiting a technical flaw in the exchange itself.<\/p>\n

Initial movements show funds being bridged from the Ethereum<\/a> network to Bitcoin<\/span> using Thorchain, a decentralized protocol that allows assets to move between blockchains<\/span> without centralized intermediaries. Onchain data indicates that roughly 878 ether, valued at about $1.8 million at the time, was part of the early laundering flow tied to the incident.<\/p>\n

The transfers are reportedly being routed through a Safepal wallet, adding another layer of separation as the attacker shifts funds between chains and addresses. Analysts have identified multiple wallet addresses linked to the theft<\/a>, including a primary ether address and additional associated accounts, along with a bitcoin<\/span> destination address receiving bridged funds.<\/p>\n

These addresses are now being tracked in real time by onchain<\/a> analysts as the funds continue to move, often in quick succession, a common tactic used to reduce traceability. The incident reflects a broader pattern seen throughout 2026, where social engineering remains one of the most effective methods for draining user funds in the digital asset space.<\/p>\n

Rather than targeting smart contract<\/span> vulnerabilities, attackers increasingly focus on human behavior, convincing victims to reveal seed phrases<\/a>, approve malicious transactions, or interact with fraudulent support channels. In many cases, the approach involves impersonating exchange staff or wallet providers, creating a false sense of urgency that pushes users to bypass standard security precautions.<\/p>\n

The case highlights the risks tied to account-level access and user-side security<\/a> practices. Security specialists continue to recommend that users avoid sharing private keys<\/span> or recovery phrases under any circumstances and verify all communications claiming to be from exchanges.<\/p>\n

Additional safeguards such as hardware wallets, two-factor authentication, and withdrawal whitelists can help reduce exposure, particularly for large holdings.<\/p>\n

FAQ \ud83d\udd0e<\/h2>\n