Mercado Bitcoin, Brazil's largest cryptocurrency exchange, suspended deposits and withdrawals on Monday following a security incident detected in the early hours of the morning. The company stated that no customer funds were lost and no data was leaked, describing the suspension as a preventive protection measure while it contained the breach.
Blockchain security firm Hypernative identified more than $40 million in suspicious transfers potentially linked to the incident across at least 10 blockchains, including Bitcoin, Ethereum, Solana, and Tron. Mercado Bitcoin has not confirmed this specific figure nor disclosed how the attackers accessed its systems. In response, the exchange published destination addresses on five networks—EVM chains, Bitcoin, Solana, Stellar, and Tron—to enable on-chain tracking of the funds.
Tether CEO Paolo Ardoino announced that the stablecoin issuer froze more than 4.5 million USDT connected to the incident. While Tether can blacklist addresses to prevent movement of tokens, freezing assets does not automatically return them to their original owners. This event occurs shortly after a separate, larger theft from Binance attributed to North Korea's TraderTraitor group, though Mercado Bitcoin has not linked the two incidents or identified the perpetrators behind its own breach. Withdrawals remain suspended with no estimated resumption date.
The incident highlights the persistent vulnerability of centralized exchanges to sophisticated attacks, even when immediate containment prevents direct customer losses. By publishing destination addresses, Mercado Bitcoin attempted to leverage transparency for fund tracking, yet the lack of confirmation regarding the $40 million estimate underscores the opacity often surrounding initial forensic assessments in crypto breaches. The involvement of multiple blockchains suggests an attack vector capable of interacting with diverse protocols, raising questions about the scope of the compromised system.
From an Operational Risk perspective, the freeze of 4.5 million USDT by Tether demonstrates the critical role stablecoin issuers play in mitigating the impact of such events, although it also reveals the limits of these interventions since frozen funds are not immediately recoverable. The timing, occurring days after a massive Binance hack, may amplify market anxiety regarding exchange security standards globally. Investors and users must monitor whether Mercado Bitcoin can restore confidence through clear communication and successful recovery efforts, as prolonged suspensions can lead to liquidity crises and regulatory scrutiny in key markets like Brazil.
