Mercado Bitcoin Freezes Withdrawals After $40 Million Security Incident

Brazil's largest cryptocurrency exchange, Mercado Bitcoin, kept deposits and withdrawals suspended on Monday after what it described as a security incident affecting one of its systems, according to Bitcoin Magazine. The company said in a statement posted to X that it had identified and contained the incident, that customers suffered no losses, and that no data had leaked. Mercado Bitcoin described the suspension as a precautionary measure while its teams investigate, trace assets and coordinate with authorities. It has not disclosed which system was breached, a confirmed loss total, or a timetable for reopening deposits and withdrawals.

Event: What Mercado Bitcoin Has Confirmed and What It Hasn't

According to Bitcoin Magazine's reporting, Mercado Bitcoin has published destination addresses tied to transactions connected to the incident, spanning Bitcoin, Ethereum-compatible networks, Solana, Stellar and Tron. The exchange said it shared these addresses for identification and tracking purposes, a step that suggests the incident involved movement of funds across multiple blockchains rather than a single-chain exploit. Bloomberg reported, per the same Bitcoin Magazine account, that Mercado Bitcoin said it would absorb all losses — a commitment that, if honored, would shield retail customers from direct financial harm regardless of the final recovery outcome.

Blockchain security firm Hypernative has put preliminary estimates of suspicious transfers above $40 million across several blockchains, though Mercado Bitcoin has not confirmed that figure, and Bitcoin Magazine noted that other analysts are citing higher numbers while the sweeping of funds is reportedly still ongoing. This gap between an unconfirmed third-party estimate and the exchange's own silence on a total is a recurring pattern in exchange security incidents: operational containment typically precedes a verified loss figure by days or weeks, and Mercado Bitcoin's public statements so far have given no total loss figure and no reopening timetable.

Stablecoin issuer Tether has also entered the response. Tether CEO Paolo Ardoino said on X, per Bitcoin Magazine, that the company had frozen more than 4.5 million USDT linked to the incident. The intervention is notable given that Tether invested $20 million in Mercado Bitcoin back in July, when the exchange reportedly served 4.5 million users — a relationship that may have aided the speed of the freeze response. Tether's willingness to move quickly on a comparatively smaller exchange incident mirrors the issuer's growing role as a de facto first responder in crypto theft cases, freezing tokens on request as transaction tracing identifies destination wallets.

Implications: A Difficult Week for Exchange Security

The Mercado Bitcoin incident lands just days after one of the largest crypto thefts in recent memory. Bitcoin Magazine reported that on Oct. 29, attackers reached $6.3 billion in assets at Binance after compromising an engineer's laptop and gaining access to internal systems used to process withdrawals. Binance said it found no evidence that private keys were exposed, and by Nov. 1 had replaced 95 percent of the stolen assets while restoring withdrawals in phases. The FBI has attributed that attack to North Korea, and the U.S. Secret Service is working with Circle to trace and freeze funds; Tether reported about $1.57 billion in USDT frozen in connection with the Binance case, while Circle said it froze more than $800 million in USDC in coordination with authorities, per the same report.

Binance has also said it found additional points of breach beyond the initial single-engineer compromise it first described, and it has not yet published a full post-mortem explaining how the attackers prepared and executed an operation that some estimates suggest took at least 36 hours of groundwork, according to Bitcoin Magazine. The destination of roughly $3.3 billion in stolen Binance funds that were not frozen remains unexplained, with investigators continuing to track wallet activity across ten blockchains. Taken together, the two incidents — one at the world's largest exchange by volume, the other at Brazil's largest domestic platform — underscore that exchange-level custody and withdrawal infrastructure remain high-value targets regardless of an operator's size or regulatory standing.

CoinHours analysis: CoinHours' saved Binance ticker data from 2026-11-02T17:05:07 UTC shows Bitcoin trading at $77,489.48, down 0.842% over 24 hours, 3.55% over seven days and 8.79% over thirty days. CoinHours' cached Alternative.me Fear & Greed reading from the same window registered a value of 37, classified as "Fear," as of timestamp 1793577600. CoinHours' saved CoinMarketCap global snapshot recorded total crypto market capitalization of approximately $2.596 trillion with a 24-hour change of -0.77%. These figures describe the broader market backdrop during the week of the Mercado Bitcoin incident and the preceding Binance breach; they do not establish that either security event caused the price moves, and CoinHours draws no causal link between the two. Sentiment readings in the Fear classification range are consistent with a market already digesting elevated uncertainty, but confirming that this specific exchange incident shifted sentiment would require data this report does not have.

What to Watch Next

Several open questions will determine how the Mercado Bitcoin incident is ultimately assessed. First is confirmation of the loss total: Hypernative's preliminary estimate of transfers above $40 million remains unconfirmed by the exchange itself, and Bitcoin Magazine noted other analysts citing higher figures amid ongoing fund sweeping. Second is the reopening timeline for deposits and withdrawals, which Mercado Bitcoin has not specified. Third is the mechanism of the breach — the exchange has not named which system was compromised, leaving open whether this resembles the internal-access compromise seen at Binance or a different attack vector entirely. Fourth is the scope of asset recovery, including how much of the suspicious cross-chain activity across Bitcoin, Ethereum-compatible networks, Solana, Stellar and Tron networks can be traced and frozen, following the model Tether has already applied with its freeze of more than 4.5 million USDT.

For Brazilian crypto users, the practical near-term effect is straightforward: funds already on the platform cannot be deposited or withdrawn until the exchange lifts its suspension, even though Mercado Bitcoin maintains that customer funds have not been lost and that it will absorb any losses. The broader market implication is that exchange infrastructure security — custody systems, withdrawal processing, and internal access controls — is facing renewed scrutiny across the industry in the same week that Binance was still completing its own recovery from a far larger breach.

Further Reading

For background on how exchanges structure custody, deposits and withdrawals, see CoinHours' guide on how crypto exchanges work.

Further reading / context

CoinHours market data as of 2026-11-02T17:05:25.316+00:00 (UTC), sourced through CoinMarketCap; rolling windows.

Asset	Price USD	24h change	24h volume USD
Bitcoin	77401.84940761597	-0.800559395909%	19840886334.81373