EDX BitSafe Partnership Brings CBTC to Institutional Markets

The new platform brings commercial card management, expense management, payables, and business travel under the Capra brand, building on an established card partnership with Zact. Capra Bank and banking technology provider Zact have launched Capra SpendLink, an integrated commercial spending platform designed to help the Iowa-based community bank deepen relationships with business customers and expand its commercial payments offering. Announced on 4 November 2026, SpendLink brings commercial card management, expense management, integrated payables, and business travel into one experience under the Capra brand. The companies say the platform is intended to help businesses manage spending controls, approvals, payments, and reconciliation while reducing reliance on disconnected systems. The launch builds on an existing commercial card program powered by Zact. According to the companies, that program has helped Capra grow its commercial payments business, serve more corporate customers, and create additional revenue opportunities. The partnership also reflects a wider strategy among community banks: use modern financial technology to compete for commercial relationships while retaining the service model, brand, and infrastructure of a regulated bank. SpendLink expands an established commercial card program. Capra SpendLink is the latest development in a longstanding collaboration between Capra Bank and Zact. Rather than introducing a standalone card product, the new platform brings several commercial financial workflows together. Businesses can manage card activity, expenses, payables, and travel through a Capra-branded experience. The integrated approach is intended to simplify how companies control and reconcile spending. Instead of managing separate systems for cards, expense reporting, supplier payments, and travel, businesses can access connected capabilities through one platform. For commercial customers, the potential value lies in reducing administrative work and improving visibility into business spending. For Capra, the offering creates a broader set of services to support its corporate customer relationships. The companies have not disclosed the platform’s pricing, launch availability by customer segment, or the number of businesses expected to use SpendLink initially. Community banks seek a larger role in commercial payments. Capra’s announcement comes as banks face competition from fintechs and specialist providers for commercial customer relationships. Commercial payments can connect a bank to a company’s daily financial activity, including employee spending, supplier payments, expense management, and reconciliation. These workflows can create opportunities for banks to offer additional services while strengthening customer engagement. Capra Chairman, CEO, and Founder Dr. Lynn “Tut” Fuller said the bank aims to combine relationship-driven community banking with technology that can compete with offerings from larger institutions. He described Zact as an important partner in growing Capra’s commercial card business and said SpendLink would give business customers access to more financial tools through the bank. Zact CEO John Thomas said the partnership demonstrates how community banks can use technology to compete for commercial business that fintech providers have increasingly targeted. The companies’ stated objective is to help Capra capture a greater share of its customers’ commercial spending. They did not disclose a revenue target or quantify the expected financial contribution from SpendLink. Zact’s bank-first platform is designed to work with existing systems Zact describes its technology as a bank-first platform that combines commercial banking applications with the security, reliability, and integration capabilities required by financial institutions. The platform is designed to operate within banks’ existing technology environments. This allows institutions to introduce new customer-facing capabilities under their own brands without replacing their underlying systems. That model may be particularly relevant to community banks, which often need to expand digital services while managing technology investment, operational complexity, and regulatory responsibilities. Zact’s broader platform includes commercial cards, expense management, payables, travel, and reconciliation. It says its approach helps banks maintain their existing systems, brands, and customer relationships while offering businesses more integrated financial experiences. The announcement does not specify which core banking or payment systems Capra uses with Zact, nor does it disclose technical integration details for SpendLink. Partnership could extend to additional commercial banking capabilities. Capra and Zact said they are exploring further commercial banking capabilities as customer needs evolve. The companies see opportunities to build on SpendLink and support more of their customers’ financial activities. Their stated ambition is to help Capra capture a larger share of commercial spending across its customer base. Those potential additions remain under exploration. The announcement does not identify specific future products, launch dates, or commercial terms. The distinction is important: SpendLink is the newly announced platform, while further expansion represents a potential next stage of the partnership. What the launch means for Capra Bank Capra Bank is a full-service community bank serving customers across Iowa, Idaho, Texas, and New Mexico. Its model combines local decision-making and relationship-led banking with modern technology. SpendLink gives the bank a broader commercial payments proposition while keeping the customer experience under the Capra brand. It also builds on an existing program rather than starting the commercial card relationship from scratch. For the wider banking market, the partnership illustrates how community banks can use specialist technology providers to expand commercial services without replacing their core infrastructure. The next indicators to watch will be customer adoption, the range of commercial workflows supported, and whether the companies move from exploring additional capabilities to announcing specific products. For now, Capra SpendLink marks a new step in the bank’s commercial banking strategy: combining card, expense, payables, and travel capabilities to strengthen business relationships and expand its role in customers’ financial operations. Source: Business Wire announcement from Capra Bank and Zact, 4 November 2026. banking technologyBusiness TravelCapra BankCapra SpendLinkcommercial bankingcommercial cardscommercial paymentscommunity banksexpense managementfintechintegrated payablesZact

Read More →

November 5, 2026

Crédit Mutuel Arkéa Confirms Major Cyberattack as Suspected Crypto Theft Reaches $133 Million

The French cooperative bank says attackers used its own account to move funds through other banks, potentially converting them into cryptocurrency. Customer assets remain unaffected, while recovery efforts continue. French cooperative banking group Crédit Mutuel Arkéa has confirmed that attackers used its own banking account to carry out fraudulent transfers, following reports of a suspected $133 million theft involving cryptocurrency exchanges. The bank said the attackers accessed its systems through the platform of an external service provider. They then used an Arkéa account to transfer money to other banking institutions. Those transfers may have enabled the attackers to convert the funds into cryptocurrency through specialized platforms. The confirmation follows blockchain investigator ZachXBT identifying Arkéa as the suspected victim of the incident. He estimated the stolen amount at more than $133 million, based on activity involving centralized cryptocurrency exchanges. However, Arkéa has not confirmed that exact figure. In a statement on 4 November, it said it could validate the reported order of magnitude but was still assessing the financial impact. The bank stressed that customer accounts were not used and that the incident had no financial impact on customers. Some funds have been blocked, while further recovery efforts are underway. <Cite refs={[“turn693778search1″,”turn661261search1″,”turn693778search12”]}/> Attackers exploited a third-party service provider. Arkéa’s clarification provides a more detailed picture of how the incident unfolded. The attackers reportedly reached the banking group through the platform of one of its service providers. From there, they accessed the bank directly and used its own account to initiate transactions to other banks. Arkéa specifically rejected reports that its online banking subsidiary, Fortuneo, was the entry point. The bank described the incident as a sophisticated external attack and said it was not caused by human error. It has not disclosed the identity of the service provider or the precise technical vulnerability used by the attackers. This distinction matters because the incident highlights risks that extend beyond a bank’s own technology environment. Financial institutions depend on external providers for critical systems and services. A weakness in one of those connections can create a route into a bank’s operations. Arkéa said its security systems detected suspicious activity and that its teams activated existing crisis procedures to contain the attack. <Cite refs={[“turn693778search1″,”turn693778search12”]}/> How the stolen funds moved through cryptocurrency channels The reported theft attracted attention after ZachXBT began tracking suspicious withdrawals from cryptocurrency exchange accounts. His investigation identified more than $133 million in suspected withdrawals linked to the incident. Blockchain analytics firm Bitquery separately traced approximately $108.8 million in USDC withdrawals from accounts associated with Kraken, Crypto.com, and OKX during 1 and 2 November. The funds were reportedly moved through multiple wallets and converted into other digital assets. This activity made recovery more complicated, particularly where funds moved across different blockchain networks or into assets with different freezing capabilities. Crypto.com and OKX confirmed taking action on accounts or funds linked to the incident, according to reporting by CoinDesk. Crypto.com said it had blocked associated funds. OKX also reported freezing an institutional customer account after identifying unusual activity. These exchange actions may support recovery efforts, but they do not establish the final amount recovered or the total financial loss. Arkéa has not published a final loss figure or confirmed the complete route taken by the funds. <Cite refs={[“turn661261search1″,”turn661261search3″,”turn693778search12”]}/> Why the $133 million figure remains unconfirmed The reported $133 million figure has become central to coverage of the attack. However, Arkéa has deliberately stopped short of confirming it. The bank said it could validate the order of magnitude but that its teams were still calculating the precise financial consequences. It also confirmed that some funds had been blocked and that other recovery actions were underway. That distinction is important. The reported amount should not be treated as a final net loss. The ultimate financial impact will depend on the value of funds successfully recovered, the amount permanently lost, and any further findings from the investigation. Arkéa also said the sums involved would not undermine the group’s financial strength or stability. The group reported total assets of €211.5 billion and more than 5.8 million members and customers in its November 2026 statement. <Cite refs={[“turn693778search1″,”turn693778search10”]}/> Customer funds remain protected, but transfers were delayed. Arkéa said the attackers did not use customer accounts belonging to its banking federations or subsidiaries. The bank maintained that customer assets were unaffected. However, the incident did cause delays to certain transfers. As a precaution, the group temporarily suspended some transactions to prevent further fraudulent movements and secure its operations. It also carried out additional checks and introduced enhanced security measures. By the morning of 4 November, almost all operations had resumed, according to the bank’s subsequent clarification. The incident therefore appears to have affected the bank’s own funds and operational processes rather than directly exposing customer deposits. Nevertheless, the disruption shows how a cyberattack on internal banking infrastructure can affect payment services even when customer accounts remain untouched. <Cite refs={[“turn693778search1″,”turn693778search2”]}/> DORA puts third-party technology risks under regulatory scrutiny. The attack also raises questions about third-party technology risk and operational resilience under the European Union’s Digital Operational Resilience Act (DORA). DORA establishes requirements for financial institutions to manage information and communication technology risks. It also introduces reporting obligations for major ICT-related incidents. Under the relevant reporting standards, financial entities must submit an initial notification as soon as possible. The deadline is within four hours of classifying an incident as major and no later than 24 hours after becoming aware of it. Further intermediate and final reports are also required. The framework places particular emphasis on managing risks associated with external ICT service providers. Banks must maintain oversight of their technology dependencies and ensure that outsourcing does not weaken operational resilience. Arkéa said it had contacted the relevant regulatory and supervisory authorities. However, the bank has not disclosed how the incident was classified under DORA or provided details of its regulatory reporting timeline. <Cite refs={[“turn693778search0″,”turn693778search6″,”turn693778search1”]}/> Investigation and recovery efforts continue. Arkéa said it is working with the relevant judicial and law enforcement authorities

Read More →

EDX Markets Partners With BitSafe to Bring Bitcoin-Backed CBTC to Institutional Traders

EDX Markets Adds CBTC/USD Spot Trading

How CBTC Brings Bitcoin Into the Canton Network

Why the EDX Listing Matters for Institutional Access

Granite River Trading to Support CBTC Liquidity

EDX and BitSafe Expand the Canton Financial Ecosystem

Reserve Transparency Does Not Eliminate Digital Asset Risk

What the Partnership Means for Institutional Bitcoin Markets

More from FinTech News

Former Revolut Employees Launch Haido Waitlist for AI-Powered Wealth Platform

Tabs Partners With Adyen to Bring Embedded Payments Into the Entire Revenue Lifecycle

Lombard Systems Raises $4 Million to Build Financing Infrastructure for Tokenized Securities

Firmly Raises $15 Million to Connect Merchants With the Growing Agentic Commerce Market

Yellow Card Acquires GoMoney to Establish Direct Operations in Brazil

Block Faces $764 Million DOJ Resolution Over Anti-Money Laundering Failures

Revolut Reaches $115 Billion Valuation as Global Banking Expansion Accelerates

BRED Bank Fiji Migrates All Active Cards to BPC’s SmartVista Platform

Lloyds and BRAC Bank Cut UK–Bangladesh Trade Documentation to One Day

OCC Issues First Supervisory Framework for Examining Banks’ AI Use

Capra Bank and Zact Launch SpendLink to Expand Commercial Banking Services

Crédit Mutuel Arkéa Confirms Major Cyberattack as Suspected Crypto Theft Reaches $133 Million

Former Revolut Employees Launch Haido Waitlist for AI-Powered Wealth Platform

Tabs Partners With Adyen to Bring Embedded Payments Into the Entire Revenue Lifecycle

Lombard Systems Raises $4 Million to Build Financing Infrastructure for Tokenized Securities

Firmly Raises $15 Million to Connect Merchants With the Growing Agentic Commerce Market

Yellow Card Acquires GoMoney to Establish Direct Operations in Brazil

Block Faces $764 Million DOJ Resolution Over Anti-Money Laundering Failures

Revolut Reaches $115 Billion Valuation as Global Banking Expansion Accelerates

BRED Bank Fiji Migrates All Active Cards to BPC’s SmartVista Platform

Lloyds and BRAC Bank Cut UK–Bangladesh Trade Documentation to One Day

OCC Issues First Supervisory Framework for Examining Banks’ AI Use

Capra Bank and Zact Launch SpendLink to Expand Commercial Banking Services

Crédit Mutuel Arkéa Confirms Major Cyberattack as Suspected Crypto Theft Reaches $133 Million