Mercado Bitcoin suspends deposits and withdrawals after security incident; attacker wallet addresses published
Brazilian crypto exchange Mercado Bitcoin disclosed a security incident in one of its systems in the early hours of 2 November 2026 and temporarily suspended deposits and withdrawals. The company stated on X/Twitter that there was no loss to customers and no data leak. It is investigating, tracing assets and coordinating with authorities. It also published destination wallet addresses tied to the incident so the community can track the movements. The article notes the incident came days after a reported Binance theft of US$ 6.3 billion attributed by the FBI and analysts to North Korean hackers. No link between the two incidents is stated, and no attribution, root cause or amount lost has been disclosed for Mercado Bitcoin.
Detalhes técnicos
- The attack vector, affected system and value of moved assets were not disclosed.
- The company's published destination addresses (EVM, BTC, SOL, XLM, TRON) indicate that assets were moved out across several blockchains.
- An IAM Brasil expert quoted in the article says attackers increasingly target identities, devices and systems that already hold legitimate authorization for critical operations. She does not tie this specifically to the Mercado Bitcoin case.
Remediação
- Blockchain monitoring teams and exchanges should add the published addresses to their watchlists.
- Customers should follow the company's official channels for updates on resuming operations.
Linha do tempo
-
Mercado Bitcoin suspends deposits and withdrawals after security incident; attacker wallet addresses published
ler a análise desta fonte ocultar
Brazilian crypto exchange Mercado Bitcoin disclosed a security incident in one of its systems in the early hours of 2 November 2026 and temporarily suspended deposits and withdrawals. The company stated on X/Twitter that there was no loss to customers and no data leak. It is investigating, tracing assets and coordinating with authorities. It also published destination wallet addresses tied to the incident so the community can track the movements. The article notes the incident came days after a reported Binance theft of US$ 6.3 billion attributed by the FBI and analysts to North Korean hackers. No link between the two incidents is stated, and no attribution, root cause or amount lost has been disclosed for Mercado Bitcoin.
Technical Details
- The attack vector, affected system and value of moved assets were not disclosed.
- The company's published destination addresses (EVM, BTC, SOL, XLM, TRON) indicate that assets were moved out across several blockchains.
- An IAM Brasil expert quoted in the article says attackers increasingly target identities, devices and systems that already hold legitimate authorization for critical operations. She does not tie this specifically to the Mercado Bitcoin case.
Remediation
- Blockchain monitoring teams and exchanges should add the published addresses to their watchlists.
- Customers should follow the company's official channels for updates on resuming operations.