Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed
Mercado Bitcoin
crypto exchange · Brazil
What happened
Hot wallets on at least 10 chains (Ethereum, Solana, Tron, Polygon, Arbitrum, Avalanche, BSC, Stellar, XDC, Bitcoin) drained with ordinary signed transfers; no smart contract exploit; how signing access was gained is unknown. CertiK notes small ETH sends from 27,160 addresses, possibly indicating access to customer deposit addresses.
Deposits and withdrawals suspended for about 4.5 million users; company says no customer loss and no data leak.
Confirmed affected parties
- All Mercado Bitcoin users (deposits and withdrawals halted)
What remains unknown
- Root cause of signing access
- Confirmed loss figure
- Whether customer deposit address keys were exposed
- Attribution (no public link to Binance or DPRK)
- Restart date
- Regulator statement (Banco Central do Brasil)
Losses: about USD 40M (Hypernative; DefiLlama lists 40,000,000) to 46.5M (Onchain Lens); company has not confirmed a figure; about USD 4.5M USDT frozen (Paolo Ardoino) and about 6.2M frozen by Tether and Circle combined by 16:42Z (GNcrypto)
Capital around this company
DFX holds no verified lender or owner record for this organization yet. That is a gap in our coverage, not evidence that none exists.
Sources
- Brazil's Mercado Bitcoin halts withdrawals after USD 40 million drained across 10 chains (CoinDesk) · 2026-11-02T15:53Z (10:53 EST)
- Mercado Bitcoin Hack Drains More Than $46 Million in Crypto (GNcrypto) · 2026-11-02T19:26Z (20:26 CET)
- Mercado Bitcoin sofre ataque hacker dias depois da Binance (InfoMoney) · 2026-11-02T16:31Z (13h31 BRT)
- Mercado Bitcoin confirma ataque hacker com perda estimada de R$ 217 milhoes e suspende saques (Blocktrends) · 2026-11-02
- DefiLlama hacks API (entries dated 30 Oct to 2 Nov) · live
Does Mercado Bitcoin touch your portfolio?
We map a company or a whole book against verified incidents: the lenders, owners and providers around each holding, with what is confirmed and what is not.