Skip to content

Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed

Global Financial Service Disruptions

Mercado Bitcoin

crypto exchange · BR · Latin America · Mercado Bitcoin (2TM group); legal entity not confirmed

Confirmed cyberStatus: activeTier 1Severity 4 of 5Evidence confidence: highAnalyst-verified

Brazil's largest crypto exchange Mercado Bitcoin was drained of about USD 36M to 49M from hot wallets across at least 10 chains on 2 Nov 2026 and took the whole platform offline, suspending deposits and withdrawals. It pledged to cover all user losses; as of 3 Nov no reopening date had been set.

Original: depósitos e saques estão temporariamente suspensos

First disruption
Nov 2 06:24 UTC
First public signal
Nov 2 (Mercado Bitcoin posts on X; Arkham on-chain research)
Acknowledged
Nov 2
Restored
not yet
Duration
not established
DFX first recorded
Nov 5 14:58 UTC

What was restricted

withdrawalsdepositstradingallScope: institution wide

Whole platform offline more than 24 hours; deposits and withdrawals suspended; no reopening date as of 3 Nov; gradual restoration promised.

Financial impact: USD 36.3M (about R$200M) per MB, USD 38M per CoinDesk; on-chain estimates USD 46M to 49M; USD 11M to 12.9M frozen with Tether, Circle, Paxos

Cause, kept in separate layers

What the institution said
Security incident in one of its systems, identified and contained; deposits and withdrawals suspended as a preventive protection measure
DFX classification
Confirmed cyber (cyber: confirmed)
Analytical hypothesis (not established)
Signing-key or signing-system compromise given valid-signature sweeps of customer deposit addresses (on-chain analysts' inference).
Wording used
preventive protection measure (medida preventiva de proteção), no customer data leaked, client assets are guaranteed
Conflicting reports
Loss USD 36.3M (MB) vs 38M (CoinDesk) vs 46M to 49M (on-chain). Frozen 11M (CoinDesk) vs 12.9M (Exame). Likely also recorded by the crypto lane; dedupe on key.

Dependencies

A dependency is a documented relationship. It is not evidence that the provider was compromised.

  • Provider: Tether, Circle, Paxos (stablecoin issuers that froze stolen funds), verified

Evidence