Mercado Bitcoin, one of the main digital asset exchanges in Brazil, announced on Monday, November 2nd, that it detected and managed to contain a security incident in one of its systems. As a preventive measure, the company temporarily suspended deposit and withdrawal services.
The alert regarding possible unusual transactions was issued by Hypernative, a company specializing in blockchain security. According to monitoring conducted by this company, approximately US$ 40 million, which is equivalent to about R$ 217.7 million, were transferred from wallets linked to the exchange.
In its official statement, Mercado Bitcoin assured that the incident was quickly identified and contained, emphasizing that there was no damage to clients or data leakage. As a protective measure, deposits and withdrawals were temporarily halted. The company's teams are actively involved in the investigation, tracking the assets, and coordinating necessary actions with competent authorities, promising periodic updates.
Most of these transfers occurred between 3:19 AM and 3:53 AM on the day in question, following Brasília time zone. The assets were directed to recently created addresses that were identified by the security company as belonging to a probable intruder.
Although Mercado Bitcoin confirmed the containment of the problem without affecting clients or exposing data, it did not endorse the value estimated by Hypernative, keeping the case under investigation with the relevant bodies.
This event occurs just a few days after Binance reported what was classified as the largest cryptocurrency theft in history. On Friday, October 30th, the major market exchange announced that a hack resulted in the movement of about US$ 6.3 billion (R$ 33.9 billion) in user wallet assets.
Binance's preliminary analysis suggests that the criminals may have gained access to the notebook of a DevOps engineer, a professional responsible for integration between development and operations. Using this computer, the hackers allegedly managed to penetrate internal exchange services by exploiting the employee's access privileges. Binance guaranteed that it would fully cover all damages caused by the attack and, at the time, also suspended deposits and withdrawals during the incident analysis, although these services have since been restored.



