Mercado Bitcoin confirmed a cyberattack on November 2 and temporarily suspended deposits and withdrawals. Hypernative identified activity across at least 10 blockchain networks, including tra
Brazilian cryptocurrency exchange Mercado Bitcoin confirmed a cyberattack on Monday, November 2, after blockchain security firm Hypernative flagged more than $40 million in suspicious transfers from wallets attributed to the platform.
Comunicado oficial:
Identificamos e contivemos com rapidez um incidente de segurança em um de nossos sistemas nesta madrugada.
Reforçamos que: • Não houve nenhum prejuízo aos clientes; • Não houve vazamento de dados.
Como medida preventiva de proteção, depósitos e saques estão temporariamente suspensos. Nossas equipes estão mobilizadas investigando o caso, rastreando os ativos e coordenando as medidas junto às autoridades competentes.
Manteremos atualizações regulares por aqui.
— Mercado Bitcoin (@MercadoBitcoin) November 2, 2026
The exchange suspended deposits and withdrawals while investigating the incident. In an official statement, it said the attack had been contained, customer information had not been exposed and clients would not incur losses.
Mercado Bitcoin has not disclosed a final loss figure or identified the system that was compromised.
According to transaction details reported by BitNotícias, citing Hypernative’s investigation, the first suspicious activity appeared at approximately 02:15 UTC, involving Bitcoin deposit addresses attributed to the exchange.
The largest transfers occurred between 06:19 and 06:53 UTC, when assets moved across multiple blockchain networks toward addresses associated with the suspected attacker.
The reported destination balances provide a more detailed picture of the investigation.
Mercado Bitcoin Security Incident Assets Identified in Suspicious Transfers Preliminary blockchain findings · November 2, 2026 Blockchain Reported Assets Ethereum 2,852 ETH Bitcoin 106 BTC Solana 10,700 SOL Stellar 6.7M XLM Avalanche 77,000 AVAX XDC Network 3.07M XDC Tron 1.7M TRX Additional activity: More than 200 other tokens were reportedly identified during the investigation. Source: BitNotícias, citing Hypernative. Preliminary figures; reported movements are not confirmed stolen amounts.Hypernative’s findings include transactions that can be examined publicly through Etherscan and Mempool.space.
The transactions were cited in the published investigation; their attribution to Mercado Bitcoin has not been independently verified for this article.
Mercado Bitcoin subsequently shared destination addresses to assist exchanges, blockchain monitoring services and other market participants in identifying potentially affected funds.
Among the addresses reported in the investigation were:
These addresses provide concrete reference points for transaction monitoring. Their publication does not establish that every asset passing through them was stolen.
The technical cause remains undisclosed. Although the activity involved ordinary cryptocurrency transfers rather than a publicly identified smart-contract exploit, investigators have not established whether the incident involved compromised credentials, signing infrastructure or another security failure.
The absence of a confirmed attack mechanism limits conclusions about the scope of the breach.
The immediate concern for customers is access to their accounts and the security of existing authorization settings.
While transfers remain suspended, users can take several precautions:
Review account balances, login history and recent transaction records for unfamiliar activity.
Revoke unused API keys and review withdrawal-address permissions, where those controls are available.
Enable or verify two-factor authentication and use a unique account password.
Monitor announcements through Mercado Bitcoin’s official website and verified support channels rather than links circulated in unsolicited messages.
Changing an account password does not repair an exchange-side wallet compromise. These steps address separate risks involving individual account access and phishing attempts.
Customers should also retain records of pending deposits or withdrawals so that unresolved transactions can be reconciled once services resume.
The incident follows the October 29 attack on Binance, which the exchange estimated caused approximately $6.3 billion in losses.
In its October 30 security update, Binance said its investigation had uncovered multiple points of compromise and that it had found no evidence of leaked wallet private keys.
The two incidents have not been linked.
Their common relevance lies in the operational dependence of centralized exchanges on secure transaction authorization. Blockchain networks can continue functioning normally while failures within an exchange’s infrastructure permit unauthorized transfers.
For Mercado Bitcoin, the investigation must establish whether the flagged funds belonged to customers or the company, how the affected transactions were authorized and whether any assets can be recovered.
The exchange’s next substantive update will be important for determining the financial impact and the conditions under which deposits and withdrawals can safely resume.
The post Brazil’s Mercado Bitcoin Hit by Breach as Questions Mount appeared first on ETHNews.
