Mercado Bitcoin Vows to Cover Customer Losses After Massive Hack

Mercado Bitcoin Faces $38 Million Security Crisis

Brazil’s Mercado Bitcoin is facing a costly security crisis following a Nov. 2 attack that drained cryptocurrency from its operational wallets. The incident struck one of Latin America’s prominent digital asset platforms, raising immediate questions about the security of exchange-controlled funds and the financial consequences of unauthorized access.

While the company has acknowledged the breach, its response now hinges on containing the damage, establishing the full scope of the intrusion, and demonstrating that its remaining infrastructure can safely support normal operations.

Bitcoin.com News previously reported that Arkham Intelligence analyst Emmett Gallic estimated more than $46 million in suspicious transfers on Monday, exceeding Mercado Bitcoin’s official accounting by at least $8 million. The competing figures have not been publicly reconciled, and it remains unclear whether both assessments encompass identical transactions or asset categories.

Mercado Bitcoin Pledges Customers Will Not Lose Assets

The company sought to calm account holders with an explicit guarantee that they would not bear the financial burden of the incident. “Mercado Bitcoin assures you that you will not suffer any loss of assets due to the security incident we identified today on our platform,” the centralized exchange (CEX) platform’s update explains.

The company’s statement effectively commits the business to making affected users whole, regardless of how much cryptocurrency investigators ultimately recover.

Emergency Shutdown Follows Detection of Suspicious Activity

Mercado Bitcoin identified the occurrence during the early hours of Monday, subsequently suspending deposits, withdrawals, and access to platform services as a preventive measure. The company activated its internal security procedures and reportedly notified the relevant authorities. It also warned users to rely on official communications rather than unsolicited messages or purported support representatives.

The operational interruption affects a business whose customers ordinarily depend on continuous access to cryptocurrency markets, particularly when prices are moving rapidly.

Investigators Scrutinize Compromised Signing Infrastructure

Preliminary analyses suggest attackers obtained control of credentials capable of authorizing transactions, potentially exposing both hot wallets and customer deposit addresses. According to a Bitquery analysis, suspicious activity reportedly spanned chains like Ethereum, Bitcoin, Solana, Stellar, Arbitrum, Tron and Polygon, with some investigators describing unauthorized movements continuing beyond the initial wave of transfers.

Unlike a smart-contract exploit, this suspected compromise concerns access to the mechanisms used to approve legitimate blockchain transactions. Possession of the necessary signing credentials can allow an attacker to move assets without defeating the network’s cryptographic protections. The precise entry point has not been conclusively established.

Tether, Circle and Chainalysis Help Block $11 Million

Mercado Bitcoin enlisted several cryptocurrency companies to restrict assets associated with the breach, securing an initial containment result. “In a swift action with the crypto community and strategic partners—including Tether, Circle, Paxos, BRL1, and Chainalysis—we have already blocked US$ 11 million,” the exchange stated.

Other amounts eligible for blocking have been identified, according to the company, although it has not provided a definitive figure for additional recoverable assets. Certain centrally issued stablecoins contain administrative functions that permit authorized issuers to prevent token transfers. Native BTC has no comparable issuer-controlled freezing mechanism.

Importantly, restricting stolen tokens does not automatically return them to their previous owners. Subsequent recovery may require cooperation from custodians, legal authorities or other parties controlling the affected assets.

Brazilian Crypto Heavyweight Faces a Defining Test

Founded in 2013, Mercado Bitcoin expanded from a bitcoin brokerage into a diversified financial technology business offering spot trading, staking, tokenized private credit, and payment services. The São Paulo-based company serves approximately 4.5 million to 4.8 million customers and has reported cumulative transaction volume exceeding 215 billion Brazilian reais.

Its expansion attracted a $200 million Softbank investment in 2021, valuing the business at approximately $2.1 billion and establishing it as a Brazilian cryptocurrency unicorn. The exchange has not provided a definitive reopening date. “The resumption of services will take place as soon as full security conditions are in place, and deadlines will be communicated exclusively through our official channels,” the company emphasized.

The remaining challenge is whether Mercado Bitcoin can demonstrate that its security controls have been repaired sufficiently to prevent another intrusion. Financial compensation can address missing balances, but restoring confidence in the systems protecting those balances requires a different kind of proof. The hack comes at a tough time for the crypto industry as it’s been healing its wounds from the latest $6.3 billion Binance hack.