Google Analytics counts our visits, with cookies. No thanks turns it off and removes its cookies; in Europe, the UK, Switzerland and India, or wherever we cannot tell where you are, it stays off unless you accept. Cookie Notice

Advertise
PRICES

← Back to Originals

InvestIn.News OriginalInvestigations

Mercado Bitcoin to absorb $40m breach loss and says customers are safe

The Brazilian exchange paused deposits and withdrawals after a security breach, said no customer funds were lost, and will cover the loss from its own reserves, Bloomberg reported.

Why it matters: It shows whether a major Brazilian exchange can shield its 4.5 million users after a breach and what proof customers should demand.

·Editor-in-Chief · 7 min read

Reviewed and fact-checked by Keshav Aggarwal on 3 Nov 2026

Share
Illustration: “Mercado Bitcoin to absorb $40m breach loss”, with exchange arrows, lock, tether icons in InvestIn.News colours

In short

  • Mercado Bitcoin confirmed on 2 November 2026 that an attacker breached one of its systems and paused deposits and withdrawals.
  • Bloomberg reported the Brazilian exchange will absorb a $40m loss and expects customers to face no losses.
  • The exchange's own post put assets involved at about $38m, with $11m already frozen by Tether, Circle, Paxos, BRL1 and Chainalysis.
  • Hypernative estimated more than $40m in suspicious transfers across at least ten blockchains, which Mercado Bitcoin has not confirmed.

What Mercado Bitcoin says happened
How much money was moved?
How the funds were tracked and frozen
What the pause means for Mercado Bitcoin users
How Brazilian traders reacted on X
Key numbers

WhatFigure
Mercado Bitcoin assets involvedabout $38m
Amount blocked with partners$11m
Hypernative suspicious transfersover $40m
Onchain Lens hacker holdings$46.5m across 46 addresses
Tether USDT frozenmore than 4.5 million USDT

Questions readers ask
Are Mercado Bitcoin customer funds safe after the hack?
What is Mercado Bitcoin?
When will Mercado Bitcoin deposits and withdrawals reopen?
Our view

Mercado Bitcoin , Brazil's largest cryptocurrency exchange, confirmed on 2 November 2026 that an attacker breached one of its systems and forced the exchange to pause deposits and withdrawals as a precaution. The exchange's own post put the assets involved at about $38m, with $11m already blocked, while Bloomberg and Bloomberg Línea reported Mercado Bitcoin will absorb a $40m loss and expects customers to face no losses. Mercado Bitcoin said the attack targeted its hot wallets, was contained quickly and that no customer data had leaked.

Comunicado oficial:

Identificamos e contivemos com rapidez um incidente de segurança em um de nossos sistemas nesta madrugada.

Reforçamos que:
• Não houve nenhum prejuízo aos clientes;
• Não houve vazamento de dados.

Como medida preventiva de proteção, depósitos e saques…

Mercado Bitcoin @MercadoBitcoin · · View on X

Atualização sobre o incidente: o Mercado Bitcoin assegura que você não terá nenhuma perda de ativos em razão do incidente de segurança que identificamos hoje em nossa plataforma.

Identificamos uma ocorrência em nossa plataforma na madrugada de hoje. Como medida preventiva para…

Mercado Bitcoin @MercadoBitcoin · · View on X

According to a post by Mercado Bitcoin on X, the exchange and partners including Tether, Circle, Paxos, BRL1 and Chainalysis had already blocked $11m of the assets involved. Hypernative, a blockchain security firm, flagged more than $40m in suspicious transfers across at least ten blockchains, including Bitcoin, Ethereum, Solana and Tron, according to Yahoo Finance. At the time of writing (00:05 UTC on 3 November 2026), Bitcoin (BTC) traded at $76,696, down 2.15% in 24 hours, with a market value of $1.54tn, according to InvestIn.News market data. Entities linked to the hack hold about $46.5m in crypto across 46 addresses, including 3,677 ETH, 106 BTC and about $8m in stablecoins, according to KuCoin, citing Odaily Planet Daily.

Neste momento o valor dos ativos envolvidos é de cerca de US$ 38 milhões. Em ação rápida com a comunidade cripto e parceiros estratégicos - incluindo Tether, Circle, Paxos, BRL1 e Chainalysis, já bloqueamos US$ 11 milhões. Outros valores passíveis de bloqueio já foram…

Mercado Bitcoin @MercadoBitcoin · · View on X

According to Yahoo Finance and Odaily, Tether chief executive Paolo Ardoino posted on X that his firm had frozen in excess of 4.5 million USDT tied to the breach. Yahoo Finance explained that Tether can blacklist wallets holding its dollar-pegged token, preventing the coins from being transferred, although such a freeze does not on its own give the funds back to their owner. The breach occurred days after more than $6bn was taken from Binance on 29 October, but according to Yahoo Finance Mercado Bitcoin has not drawn a connection between the two.

Brazil's Largest Crypto Exchange Mercado Bitcoin Confirms Cyberattack; Hypernative Estimates Over $40M in Suspected Losses @MercadoBitcoin, Brazil's largest cryptocurrency exchange, confirmed on November 2 that one of its systems had suffered a cyberattack. The exchange said… pic.twitter.com/DT10II5PgK

Wu Blockchain @WuBlockchain · · View on X

Tether said it has frozen more than 4.5M USDT related to this security incident.

Wu Blockchain @WuBlockchain · · View on X

Mercado Bitcoin's users could not deposit or withdraw funds while the exchange kept services paused on 2 November 2026. The exchange said no customer funds were lost and no personal information was exposed, but it has not given a date for resuming deposits and withdrawals, according to Yahoo Finance and Bitcoin Magazine. Users can follow Mercado Bitcoin's posts on X for regular updates.

On X, some traders said the promise that customers will not incur losses was an undertaking rather than a proven fact. Adam Healy (@Adam_T_H) said on X that funds leaving across more than ten chains at once usually points to a shared withdrawal or signing service, not one wallet. Web3 lawyer chief barrister (@Web3Counsels) said on X that under Brazil's Law 14.478/2022, Mercado Bitcoin answers to the Banco Central, and SSP Wallet (@SSPWallet_io) argued self-custody does not need such a promise. Dickson (@DicksonWuML) said on X that he had traced $49m stolen and $6m frozen so far.

Second exchange in five days with funds leaving across 10+ chains at once. That pattern usually means the attacker reached a shared withdrawal or signing service, not one wallet. "Customers won't lose" is the right first message. The useful second one is which system, and how.

Adam Healy @Adam_T_H · · View on X

Mercado Bitcoin has not given a date for resuming deposits and withdrawals, and it said it will post regular updates on X, according to Yahoo Finance and Bitcoin Magazine. The exchange is investigating the incident, tracing the assets and working with authorities and relevant partners, according to PYMNTS. It has also published destination addresses from the incident on Bitcoin, Ethereum-compatible networks, Solana, Stellar and Tron so others can track the funds on-chain, according to Yahoo Finance.

Customers will not incur losses" is an undertaking, not a fact — the $40M has to come from reserves or the balance sheet. Under Brazil's Law 14.478/2022, Mercado Bitcoin now answers to the Banco Central, and its incident report to the regulator will matter more than its

web3 lawyer 首席大律师 @Web3Counsels · · View on X

Hypernative's $40M+ is an estimate. What's confirmed is the exchange's own statement that a system was breached. 'Customers won't incur losses' is a company promise. Self-custody doesn't need one.

SSP Wallet @SSPWallet_io · · View on X

Traced all the funds here - 49M stolen and 6M frozen so far https://t.co/GKI7Gg2W7q

Dickson @DicksonWuML · · View on X

self custody looking better every minute pic.twitter.com/WegXkMoH9v

Seasmaxxing @seasmaxi · · View on X

$40M is wild but glad customers aren't eating the loss tbh

Macro Bombastic @MacroBombastic · · View on X

Mercado Bitcoin said on 2 November 2026 that no customer funds were lost and no personal data leaked. Bloomberg and MSN reported the exchange will absorb the $40m loss from the hack, and Mercado Bitcoin's own post said it had already blocked $11m with Tether, Circle, Paxos, BRL1 and Chainalysis.

If Hypernative's read holds, 10 chains moving at once is the clue. Bugs are usually on one chain. This looks like the system that signs for all the exchange's wallets, the same shape as Binance last week.

Tudor Anastasiu @tudoratu · · View on X

Mercado Bitcoin is Brazil's largest cryptocurrency exchange. It paused deposits and withdrawals on 2 November 2026 after a security breach, and its own post put the assets involved at about $38m with $11m already blocked.

Mercado Bitcoin has not given a date for resuming deposits and withdrawals, according to Yahoo Finance and Bitcoin Magazine. The exchange said it will post regular updates on X, and customers can follow its official account.

At InvestIn.News, we think the key distinction is between what Mercado Bitcoin has promised and what on-chain data has yet to prove. The exchange's statement that customers will not incur losses is an undertaking, not an audited fact; the $40m or $38m must ultimately come from reserves or the balance sheet. Multi-chain outflows across at least ten blockchains, days after the Binance breach, raise a serious operational question about whether a shared withdrawal or signing service was compromised. If that proves true, the incident is broader than one hot wallet and may affect how other exchanges protect similar infrastructure. We will treat any attribution to North Korea or another actor as unverified unless Brazilian authorities or the exchange confirm it.

How we reported this: this story draws on reporting by Mercado Bitcoin (@MercadoBitcoin) on X, bloomberg.com, msn.com, Yahoo Finance and PYMNTS.com and 3 more, 8 public posts shown in the story and InvestIn.News market data. Each source is linked in the text and listed under Sources.

Follow the latest as it happens on Stablecoins NewsFeeds.

What to watch: Mercado Bitcoin has not given a date for resuming deposits and withdrawals; it said it will post regular updates on X.

Sources

Live updates on NewsFeeds:BitcoinBy Ishu Aggarwal

Disclosure: Ishu Aggarwal does not own any cryptocurrency, tokens or shares in crypto companies, and is not paid by any company covered on this site, updated 6 October 2026. Our holdings and trading policy.

How this was produced: the writer drafted this piece with AI help, from the reporting and sources it names, then checked and edited it. Read our Editorial and AI policy. Spotted a mistake? See Corrections.

Not investment advice. Read the risk disclaimer.

← Back to Originals