Mercado Bitcoin freezes deposits and withdrawals after security incident
- Published
- Updated
- Since then
- 18 new reports
Mercado Bitcoin suspended deposits and withdrawals after a security incident and remained under investigation as outside trackers and the exchange itself described large outflows from wallets tied to the Brazilian platform. New reporting added chain-specific details, including a Stellar address holding 6.7 million XLM and a broader cross-chain estimate of the affected funds.
Key claims & sources
What it means
Mercado Bitcoin, Brazil's oldest and largest crypto exchange, dates to 2013 and has weathered earlier regulatory scrutiny from the country's securities body. The November 2 freeze lands days after the record $6 billion Binance hack, putting a second major platform's custody practices under scrutiny inside the same week. Brazilian users had few local alternatives of comparable scale, which makes the exchange's security posture a national, not just corporate, concern.
Customers cannot move funds in or out while Mercado Bitcoin investigates, and the exchange has named destination wallets receiving bitcoin, ether and other assets without disclosing a total loss figure. Tether's freeze of over 4.5 million USDT tied to the incident shows stablecoin issuers acting as a backstop, blocking some proceeds on Ethereum and Tron even as the exchange insists customers themselves suffered no losses.
An attacker still holding $46 million across 36 tracked addresses, per Arkham, shows how quickly stolen funds fragment across chains faster than exchanges can react. Tether's ability to blacklist wallets on demand is useful for containment, but it also exposes how centralized the 'decentralized' rails really are: one issuer's compliance call, not code, decided which funds moved and which froze.
Whether Mercado Bitcoin discloses a final loss figure and a timeline for restoring withdrawals will determine how much of the $40 to $46 million estimated by Hypernative and Arkham gets clawed back. Further Tether freezes, or their absence, will signal how much of the attacker's remaining balance is still reachable before it exits through less cooperative venues.
Market reaction i
Coverage timeline
Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.
Thefts of a similar size
| When | What happened | Figure |
|---|---|---|
| 5.5 years ago | EasyFi · Private key leakage incident | $46.9M |
| 2.1 years ago | BingX · Hot wallet key compromised incident | $45M |
| 3.5 years ago | CoinDeal · Scam incident | $45M |
| 5.5 years ago | Bunny · Spot Price Manipulation incident | $45M |
| 6.7 years ago | Josh Jones incident | $45M |
4268 incidents stored · 133 were as large as this one or larger ($46M)