Hackers breached C&M Software in Brazil, moving around $148 million from reserve accounts at six institutions, with $40 million flowing into cryptocurrencies.
The breach was facilitated by an IT worker selling login details for $2,770, creating a major hole in the PIX network used for instant payments in Brazil.
Investigators traced the stolen funds, with around $40 million flowing into Bitcoin, Ethereum, and stablecoins through Latin American over-the-counter desks and crypto exchanges.
Efforts are underway to recover the stolen funds, with $50 million secured so far, court accounts frozen, and the accused insider arrested, prompting calls for tighter security measures and oversight in Brazil.