Crypto Attacks in France: Suspect M1llionz Shows Off on TikTok

ZachXBT Links M1llionz to Two Crypto Attacks in France

In a thread published this Monday on X, on-chain investigator ZachXBT accuses an individual operating under the pseudonyms M1llionz and RichMilly666. He suspects him of participating in the laundering of stolen cryptocurrencies during two violent home invasions that occurred in France last April.

The first incident dates back to April 17. Five assailants forced their way into a victim's home before stealing approximately 7.2 bitcoins, worth nearly $557,000 at the time. Several individuals had to be hospitalized.

Three days later, a second victim was tied up and threatened to force her to transfer about $110,000 in cryptocurrencies. In total, the two attacks allowed the assailants to steal nearly $667,000 in digital assets.

A Reconstructed On-Chain Fund Trail

The bitcoins stolen on April 17 were converted into Ethereum via Chainflip, a cross-chain gateway protocol. Approximately $317,000 then passed through three KuCoin deposit addresses before converging into a single consolidation address identified by ZachXBT. Another portion of the loot was converted into Monero, a cryptocurrency designed to obscure amounts and participants.

After the second attack, around 46 ETH, worth nearly $107,000, followed a similar path through KuCoin before reaching the same consolidation address. From this wallet, about $108,000 was transferred to an address that exchanged the ETH for USDT.

The transaction fees for this transfer were paid by an address linked to the victim of April 20. This connection allowed ZachXBT to report the activity to Tether and law enforcement, resulting in the freezing of 93,507.51 USDT on April 24.

A Lavish Lifestyle Displayed on Telegram and TikTok

The individual runs a Telegram channel called EMPIRE, where he promotes banking fraud services while showcasing an ostentatious lifestyle, with his face systematically blurred. It was his own posts that betrayed him.

According to ZachXBT, several screenshots of Exodus wallets shared on this channel subsequently received about $84,000 directly from the proceeds of the thefts. An address posted on March 12 received 1.44 ETH from the April 17 theft, a video from June 8 shows the sending of 22.37 ETH related to the April 20 attack, and new screenshots from June 11 confirm control of an address that received approximately 12.28 ETH from the consolidation wallet.

To date, no arrests or prosecutions have been announced. The individual remains presumed innocent. His TikTok and Telegram accounts have gone silent in recent days, with the TikTok profile set to private.

A Surge of Attacks Accelerating in France

These events are part of a wave of physical assaults targeting cryptocurrency holders on French soil. ZachXBT indicates that he has identified two other attacks within less than two intermediaries from the same peer-to-peer addresses used by the suspect.

For investors, the operational lesson remains unchanged. The public exposure of a crypto portfolio creates a real physical risk that no cybersecurity measure can cover.