Mercado Bitcoin freezes deposits and withdrawals after security incident
- Published
- Updated
- Since then
- 42 new reports
Mercado Bitcoin suspended deposits and withdrawals after reporting a security incident on November 2, and outside estimates of the amount moved or stolen ranged from about $38 million to $49 million across multiple blockchains. The exchange, Tether, and Chainalysis later said parts of the funds had been frozen or blocked, while subsequent onchain tracking showed attackers moving some assets after the breach was first said to be contained.
Key claims & sources
What it means
Mercado Bitcoin, Brazil's oldest and largest crypto exchange, dates to 2013 and has weathered earlier regulatory scrutiny from the country's securities body. The November 2 freeze lands days after the record $6 billion Binance hack, putting a second major platform's custody practices under scrutiny inside the same week. Brazilian users had few local alternatives of comparable scale, which makes the exchange's security posture a national, not just corporate, concern.
Customers cannot move funds in or out while Mercado Bitcoin investigates, and the exchange has named destination wallets receiving bitcoin, ether and other assets without disclosing a total loss figure. Tether's freeze of over 4.5 million USDT tied to the incident shows stablecoin issuers acting as a backstop, blocking some proceeds on Ethereum and Tron even as the exchange insists customers themselves suffered no losses.
An attacker still holding $46 million across 36 tracked addresses, per Arkham, shows how quickly stolen funds fragment across chains faster than exchanges can react. Tether's ability to blacklist wallets on demand is useful for containment, but it also exposes how centralized the 'decentralized' rails really are: one issuer's compliance call, not code, decided which funds moved and which froze.
Whether Mercado Bitcoin discloses a final loss figure and a timeline for restoring withdrawals will determine how much of the $40 to $46 million estimated by Hypernative and Arkham gets clawed back. Further Tether freezes, or their absence, will signal how much of the attacker's remaining balance is still reachable before it exits through less cooperative venues.
Market reaction i
Coverage timeline
Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.
Thefts of a similar size
| When | What happened | Figure |
|---|---|---|
| 2 months ago | Nesa · Arithmetic Error incident | $50M |
| 1.7 years ago | Infini · Lack of strict access control incident | $50M |
| 2.1 years ago | Radiant V2 · Blind Signing incident | $50M |
| 1.7 years ago | Infini · Private Key Compromised incident | $49.5M |
| 1.2 years ago | BtcTurk · Hot Wallet Key Compromised incident | $48M |
4280 incidents stored · 130 were as large as this one or larger ($49M)