Brazil's Mercado Bitcoin Halts Deposits and Withdrawals After Cyberattack, Over $40 Million in Suspicious Transfers Reported
Brazilian cryptocurrency exchange Mercado Bitcoin temporarily suspended deposits and withdrawals on November 2 after identifying a security incident affecting one of its systems. The incident has drawn attention across the crypto industry after blockchain security firm Hypernative reportedly identified more than $40 million in suspicious transfers linked to the activity.
Mercado Bitcoin confirmed that it had detected and contained a security problem, but its initial communication did not confirm a financial loss of $40 million. The company said the temporary restriction on deposits and withdrawals was a precautionary measure intended to protect users while its security teams investigated the incident.
The exchange also stated that customers would not suffer losses and that no customer data had been leaked.
The distinction between the exchange's statement and the blockchain monitoring estimate is important. More than $40 million in suspicious transfers does not automatically mean that the exchange lost that amount or that customer balances were stolen.
What Happened at Mercado Bitcoin?
The incident became public on November 2, 2026, after Mercado Bitcoin detected suspicious activity involving one of its systems.
The exchange responded by containing the affected system and temporarily restricting deposits and withdrawals. Its security teams began investigating the incident and tracking potentially affected assets, while coordinating with relevant authorities.
The company did not initially disclose which specific system had been compromised, how the attackers gained access or whether the incident involved a particular vulnerability.
The temporary suspension means users may not be able to move funds into or out of the exchange through the affected services while the investigation continues.
Mercado Bitcoin's initial response focused on protecting customers and limiting the potential impact of the incident rather than providing a detailed technical explanation.
According to reporting published on November 2, the exchange said customer data had not been exposed and customers would not incur losses. However, further technical and financial details were still awaited.
Hypernative Flags More Than $40 Million in Suspicious Transfers
The reported scale of the incident increased after blockchain security firm Hypernative identified more than $40 million in suspicious transfers potentially connected to the attack.
According to preliminary reporting, the activity involved at least 10 blockchain networks. Bitcoin, Ethereum, Solana and Tron were among the networks identified.
Cross-chain activity can make an investigation more complicated because funds may move between different blockchain environments, wallets and services. Investigators and security researchers must examine transaction patterns to determine which transfers are genuinely connected to an incident.
However, the reported $40 million figure should be treated carefully.
It represents suspicious transfer activity identified through preliminary blockchain monitoring. It is not the same as a confirmed loss disclosed by Mercado Bitcoin. The exchange has not publicly confirmed that customers lost $40 million or that the entire amount was stolen from its systems.
Mercado Bitcoin Says Customer Funds and Data Are Protected
One of the most important parts of the exchange's initial response was its statement about customer protection.
Mercado Bitcoin said the incident had been contained and that customers would not suffer losses. It also said there had been no customer data leak.
These assurances are significant for users who may be concerned about the safety of their cryptocurrency holdings and personal information.
Nevertheless, the investigation remains important. An exchange's initial assessment may be followed by additional disclosures as security teams examine wallet activity, system access records and the movement of potentially affected assets.
The company has not provided a complete public technical account of the incident in the initial reports.
For users, the practical issue is the temporary restriction on deposits and withdrawals. Until the exchange confirms that its systems are safe and services have resumed, customers may face limitations when trying to transfer their assets.
Why the Incident Matters for Brazil's Crypto Market
Mercado Bitcoin is widely recognised as one of Brazil's major cryptocurrency platforms. A security incident involving an established exchange can therefore attract attention beyond its own customer base.
Brazil has become an important market for cryptocurrency adoption, trading and digital financial services. As participation grows, the security of exchanges and custody infrastructure becomes increasingly important.
Centralised exchanges hold or manage access to large amounts of digital assets on behalf of customers. That makes their internal systems, withdrawal controls, authentication processes and monitoring infrastructure important parts of the broader crypto ecosystem.
An incident at a major platform can also raise questions about how exchanges detect suspicious transactions and how quickly they can restrict unauthorised activity.
The Mercado Bitcoin case highlights another challenge: blockchain transactions can be visible publicly, but identifying the people behind wallets and establishing whether a transfer represents a confirmed theft requires further investigation.
What Mercado Bitcoin Users Should Watch Now
Customers should rely on official announcements from Mercado Bitcoin for information about the suspension and the restoration of services.
There are several developments worth monitoring:
- Withdrawal and deposit status: Whether the exchange restores both services or continues restrictions while its investigation proceeds.
- Confirmed financial impact: Whether the company publishes a verified estimate of any affected assets.
- Security investigation: Whether Mercado Bitcoin explains how the incident occurred and which systems were involved.
- Blockchain tracking: Whether Hypernative or other security researchers identify additional wallets or transfers connected to the incident.
- Customer protection: Whether the exchange provides further details about how it is protecting user balances and accounts.
Users should be cautious about unofficial messages claiming to offer refunds, recovery services or emergency account verification. Security incidents often create opportunities for impersonation and phishing attempts.
Customers should use the exchange's official website and verified communication channels rather than links shared through unsolicited messages.
A Reminder of the Risks Facing Centralised Crypto Exchanges
The Mercado Bitcoin incident comes at a time when exchange security remains a major concern for the digital asset industry.
Crypto platforms must protect a combination of online infrastructure, wallet systems, customer accounts and internal operational tools. A weakness in one part of that environment can potentially affect the movement of assets even when the underlying blockchain networks continue operating normally.
The incident also demonstrates why security firms monitor blockchain activity independently of exchange announcements. On-chain monitoring can identify unusual transfers quickly, while the exchange's internal investigation is needed to establish what happened inside its systems.
Neither source alone necessarily provides the full picture during the early stages of an incident.
For Mercado Bitcoin, the next important step will be providing more information about the affected system, the status of customer services and whether any assets were actually lost.
What Happens Next?
The immediate focus remains on the exchange's investigation and the restoration of deposits and withdrawals.
Hypernative's reported estimate of more than $40 million in suspicious transfers has made the incident particularly significant, but the final financial impact remains unconfirmed.
Mercado Bitcoin has said that customers will not suffer losses and that no customer data was leaked. Further updates will be needed to understand how the attack happened, whether any funds were taken and how the exchange plans to strengthen its security systems.
Until those details become available, the incident should be described as a confirmed security event accompanied by a preliminary estimate of suspicious blockchain transfers — not as a verified $40 million customer-fund loss.
Frequently Asked Questions
Was Mercado Bitcoin hacked?
Mercado Bitcoin confirmed a security incident affecting one of its systems on November 2, 2026. The company said it contained the incident and began an investigation.
Why did Mercado Bitcoin suspend deposits and withdrawals?
The exchange temporarily suspended deposits and withdrawals as a precautionary measure while its security teams investigated the incident and worked to protect users.
Was more than $40 million stolen from Mercado Bitcoin?
Not confirmed. Hypernative reportedly identified more than $40 million in suspicious transfers across multiple blockchains. That figure is not an officially confirmed loss disclosed by Mercado Bitcoin.
Were customer funds or personal data affected?
Mercado Bitcoin said customers would not suffer losses and that no customer data had been leaked. Further details may emerge as the investigation progresses.
Which blockchains were involved in the suspicious transfers?
Preliminary reporting identified activity across at least 10 blockchain networks, including Bitcoin, Ethereum, Solana and Tron.
When will Mercado Bitcoin resume deposits and withdrawals?
The exchange had not provided a confirmed restoration time in the initial reports. Customers should follow its official announcements for service updates.
Is Mercado Bitcoin Brazil's largest crypto exchange?
It is widely described in industry reporting as one of Brazil's largest cryptocurrency exchanges. The incident has attracted attention because of its position in the country's digital asset market.
Editorial Note
This report distinguishes Mercado Bitcoin's confirmation of a security incident from Hypernative's preliminary estimate of suspicious transfers. The reported $40 million figure has not been presented as a confirmed theft or customer loss. Information may change as the investigation develops.
Sources and Further Reading:
