Security

Mercado Bitcoin suspends deposits and withdrawals after a security incident, with trackers reporting more than $46 million out and the exchange confirming no amount

Mercado Bitcoin suspended deposits and withdrawals after a security incident. Trackers say over $46M left; the company confirms no amount.

By ·

On November 2, 2026, Mercado Bitcoin said it had contained a security incident in one of its systems and temporarily suspended deposits and withdrawals as a precaution. Blockchain trackers say more than $46 million left the platform; the company has confirmed no amount. It says clients were not affected, which several security experts dispute. Data as of November 3, 2026.

The essentials

The incident comes days after the theft covered in Binance hit by the largest crypto hack on record. The Block and FinanceFeeds do not link the two cases, and no source we read establishes a link or a common author.

What does Mercado Bitcoin say?

According to its posts on X, as reported by The Block and The Record, the company suspended deposits and withdrawals while it investigates, tracks the assets and coordinates with the competent authorities. It says no client was affected and no data leaked, and it published the destination addresses of the funds (per FinanceFeeds, on Ethereum-compatible networks, Bitcoin, Solana, Stellar and Tron) to help tracing. It confirmed no amount and promised to restore the platform in the coming days (The Record), without a precise schedule. It describes itself as Latin America's largest digital asset investment platform, with about 4.5 million clients (its own claim).

Who says what about the Mercado Bitcoin incident. The company's statements reach us through The Block and The Record. The $46 million figure comes from trackers, not from the company. Mercado Bitcoin (its posts on X, via The Block and The Record): Says it identified and contained an incident in one of its systems early on November 2, and suspended deposits and withdrawals temporarily as a precaution; Says no client was affected and no data leaked, and published the destination addresses of the funds to help tracing; Confirmed no amount and gave no precise schedule, only a promise to restore the platform in the coming days; Blockchain trackers (not confirmed by the company): More than $46 million out of the platform, according to Arkham (about $46.3 million) and other blockchain security firms; Successive estimates from different sources, not to be added up; Tether (confirmed by its CEO, Paolo Ardoino): More than 4.5 million USDT tied to the incident frozen; Blockchain security experts (The Record): Dispute the claim that no client was affected, pointing to on-chain evidence of funds siphoned from client wallets; A disagreement, not an established fact. Outline of who says what. The company's posts on X are known to us only through The Block, and the amounts are third-party estimates. We tested nothing. Source: The Block, The Record, FinanceFeeds.

Source: The Block, The Record, FinanceFeeds.

What do the trackers say?

Blockchain security firms put the outflow at more than $46 million (The Record) and Arkham at about $46.3 million (The Block). FinanceFeeds says Hypernative first flagged more than $40 million of suspicious transfers on at least 10 networks. These are successive estimates from different sources, not figures to add up. The total and the assets lost are not established.

The Record says funds left late Sunday night, the company says Monday morning; the gap is unexplained and we do not settle it. FinanceFeeds says funds kept moving for hours after the announcement.

Tether's CEO confirmed the freeze of more than 4.5 million USDT (The Block, The Record). The Record adds that other platforms reportedly froze about $2 million more, unconfirmed. Chainalysis says it is tracking the funds. An Arkham analyst says the attacker swept old deposit addresses and sold memecoins and altcoins (The Block).

Are clients affected?

The company says no, and that no data leaked. According to The Record, several blockchain security experts dispute this, pointing to on-chain evidence of funds siphoned from client wallets. It is a disagreement, not an established fact, and we cannot verify either side.

What is not established?

Confirmed, reported, disputed, not established. The Mercado Bitcoin incident, as of November 3, 2026. Confirmed by the company: A security incident in one of its systems, identified and contained; Deposits and withdrawals suspended temporarily as a precaution; Destination addresses of the funds published to help tracing; Confirmed by Tether's CEO: More than 4.5 million USDT tied to the incident frozen; Reported by third parties, not confirmed by the company: More than $46 million out of the platform, according to trackers (Arkham and others); Disputed: The company's claim that clients were not affected, which several security experts contest; Not established: The total amount, and who bears the loss; The attack method, the system affected and the attackers; The state of trading, and the restart date. Situation evolving. We tested nothing. This is neither investment advice nor financial advice. Source: The Block, The Record, FinanceFeeds.

Source: The Block, The Record, FinanceFeeds.

Also open: which authorities were notified (the company says only "competent authorities"), whether trading is open, and what becomes of the frozen funds. Causes put forward by third parties are hypotheses.

Comparison table

Comparison table
PointWhat the sources saySource
IncidentContained in one system; deposits and withdrawals suspendedMercado Bitcoin posts on X, via The Block and The Record
AmountMore than $46 million out per trackers; not confirmed by the companyThe Record, The Block, FinanceFeeds
FreezeMore than 4.5 million USDT frozen, confirmed by Tether's CEOThe Block, The Record
ClientsThe company says none affected; experts dispute itMercado Bitcoin, via The Record
Cause, attackersNot establishedn/a

Frequently asked questions

How much was stolen?

Trackers say more than $46 million left the platform. The company has confirmed no amount; these are estimates, not a verified total.

Are my funds safe?

The company says clients were not affected; several experts dispute this. We cannot verify either claim, and this is not advice on your funds.

When will withdrawals resume?

The company promised to restore the platform in the coming days, with no precise schedule.

Method and limits

We read The Block, The Record and FinanceFeeds through automatic summaries; CryptoSlate returned a 403 error and was not read. The company's posts on X reach us only through The Block and The Record. Amounts are unverified third-party estimates. We tested nothing. This is not investment advice or financial advice.

Sources

Spotted an error in this article? Report it · Our corrections policy

Rekha icon: a house drawn in a single stroke

From the same author Self-promotion

An Eulerian path, drawn with your finger

Rekha, the iPhone game by OrigoTech's author: connect every dot in a single stroke without tracing the same link twice, across 500 drawings that are all solvable.

The OrigoTech newsletter

A sourced weekly digest of AI tool news.

Read next