Short answer
Mercado Bitcoin, which calls itself Latin America's largest digital asset platform, said it contained a security incident overnight on 2 November 2026 and suspended deposits and withdrawals. Blockchain security firms estimate $40 million or more was drained. The company says customers suffered no loss, which some analysts dispute.
If you think your details were included, start with our checklist on what to do after a data breach.
Key facts
| Organization | Mercado Bitcoin |
|---|---|
| Incident type | Crypto theft |
| Status | Under investigation |
| Sector | Cryptocurrency exchange |
| Country | Brazil |
| Detected | 2026-11-02 |
| Disclosed | 2026-11-02 |
| People or records affected | Estimated $40 million to more than $46 million moved out, per blockchain security firms; Mercado Bitcoin has not confirmed an amount. It says no customer was harmed and no data leaked. |
What data was exposed
- Crypto assets moved out of wallets linked to the exchange (not reported as personal data)
- Mercado Bitcoin says there was no data leak; blockchain analysts dispute that customer funds were untouched
What happened
Mercado Bitcoin said on Monday 2 November 2026 that it had identified and contained a security incident in one of its systems overnight. As a precaution it suspended deposits and withdrawals, and its app went offline. It said the platform would be restored in the coming days.
Tecnoblog reported that most transfers took place between 3:19 and 3:53 a.m. Brasília time. Blockchain firm Hypernative watched the funds move from wallets linked to the exchange into newly created addresses it tied to a possible attacker.
How much and from whom
The company has given no loss figure. Hypernative estimated about $40 million, around R$217.7 million. The Record, citing other blockchain security firms, said more than $46 million left late Sunday night.
Mercado Bitcoin says the attack did not harm customers and did not lead to a data breach. Several security researchers quoted by The Record disagree and say blockchain evidence shows funds taken from some customer wallets. Both positions are on record, and the investigation is not finished. Treat “no customer harm” as the company’s statement, not a verified outcome.
Recovery efforts
The company published the destination addresses for the stolen funds and says it is tracking the assets with authorities. According to The Record, Tether’s CEO Paolo Ardoino said about $4.5 million was frozen, and other platforms froze about $2 million more. Chainalysis said it is following the coins. Mercado Bitcoin says it has around 4.5 million customers.
Context
The incident came days after the Binance theft, which US agencies blamed on North Korean hackers. See our post on the Binance hack. The Record noted several exchanges have lost millions to attacks in the past six months. No technical cause has been published for the Mercado Bitcoin attack and no group has been named.
What users should do
Withdrawals were paused at the time of writing, so there is little you can do with funds other than wait for official updates. What you can control is your exposure to the scams that follow a hack. Fake reimbursement forms and “support” accounts on Telegram or WhatsApp appear within hours of a headline like this one. Use the app or an address you type yourself, never share a seed phrase, and ignore anyone who offers to get your money back for a fee. Our guide to recovery scams explains how those offers work, and our guide to investment scams covers fake exchange sites. Our data breach checklist lists account steps that apply here.
Scams to watch for after this breach
Criminals use breach news as cover. Expect messages that mention the incident, quote real details, or offer help.
- Fake 'reimbursement' or 'wallet re-validation' pages that ask for your seed phrase or exchange login.
- Impersonators on Telegram, X or WhatsApp posing as Mercado Bitcoin support and offering to speed up withdrawals.
- Recovery scams that promise to trace stolen crypto for an upfront fee.
What to do if you are affected
- 01Use only the official Mercado Bitcoin app or the address you type yourself, and ignore links sent by message about reimbursements.
- 02Never share your seed phrase, 2FA codes or password with anyone claiming to be support.
- 03Turn on an authenticator app or security key for the account and review recent login and withdrawal history.
- 04Wait for official updates before moving or trading, and do not pay anyone who offers to recover funds.
- 05If you hold large balances, consider moving a share to a wallet you control once withdrawals reopen.
Frequently asked questions
How much was stolen from Mercado Bitcoin?
Mercado Bitcoin has not confirmed an amount. Hypernative estimated about $40 million (roughly R$217.7 million), and other blockchain security firms cited by The Record said more than $46 million left the platform.
Did customers lose money?
The company says the attack did not harm customers and did not lead to a data breach. The Record reported that several blockchain security experts disputed that, pointing to on-chain evidence that some customer wallets were drained.
Has any of the money been frozen?
The Record reported that Tether's CEO said about $4.5 million was frozen, and that other platforms froze another $2 million. Chainalysis said it is tracking the coins.
Who is behind the attack?
No one has been named. The Record did not attribute it to any group. Binance's theft days earlier was blamed on North Korea by US agencies, but no link to Mercado Bitcoin has been shown.
Sources
- Brazil's largest crypto exchange confirms cyberattack as funds leave platform, The Record, 2026-11-02
- Mercado Bitcoin pode ter perdido R$ 217 milhões em ataque hacker, Tecnoblog, 2026-11-02
This post summarises public reporting as of 2026-11-06. Details of live incidents change; we update posts when the organization or regulators publish new facts. Spot an error? See our editorial and corrections policy.