🔥Brazil Central Bank Reserves Hacked, $140M Stolen 🔥
On June 30, 2025, a major cyberattack stole approximately $140 million from six reserve accounts of the Brazilian Central Bank. The hack exploited a vulnerability in C&M Software, a São Paulo-based partner company.
How the Attack Unfolded
An employee of C&M Software, João Nazareno Roque, sold his corporate access credentials for $2,770 and later provided an additional access tool for $1,850. This gave hackers direct entry into the company's systems. Funds were then transferred from Central Bank reserve accounts to commercial bank accounts, with $30-$40 million quickly converted into Bitcoin, Ethereum, and Tether.
Response and Investigation
Blockchain analysis teams are working with Brazilian prosecutors to freeze associated digital wallets, and $49.8 million has already been frozen. Roque is in custody. The stolen funds were laundered through exchanges in Brazil, Argentina, and Paraguay within three hours, though hackers faced difficulties converting large sums within Brazil due to tightened regulations.
The Central Bank temporarily disconnected all institutions linked to C&M Software and confirmed that critical systems were unaffected. Investigations are ongoing to recover funds and identify all involved parties.
