Brazilian cryptocurrency exchange Mercado Bitcoin has temporarily suspended deposits and withdrawals after identifying and containing a security incident in one of its systems. The company says customers suffered no financial losses and no data was leaked, although blockchain security firm Hypernative has reportedly flagged more than $40 million in suspicious transfers across roughly 10 blockchains in connection with the event. While the investigations have raised questions about the volume of off-chain activity, the exchange maintains that customer funds and data were not affected. For customers, the suspension is the most immediate practical consequence: until services are restored, funds held on the platform cannot be moved in or out.

Exchange Suspends Deposits and Withdrawals as a Precaution

In an official statement posted on X on November 2, 2026, Mercado Bitcoin said it had identified and quickly contained the incident in the early hours of the morning, and emphasized two points: customers did not suffer losses, and no data was leaked. Deposits and withdrawals were suspended as a preventive protective measure while the company's teams investigate the case, trace the assets involved, and coordinate measures with the competent authorities.

The exchange's statement, published in Portuguese, reads in full:

Comunicado oficial: Identificamos e contivemos com rapidez um incidente de segurança em um de nossos sistemas nesta madrugada. Reforçamos que: • Não houve nenhum prejuízo aos clientes; • Não houve vazamento de dados. Como medida preventiva de proteção, depósitos e saques estão temporariamente suspensos. Nossas equipes estão mobilizadas investigando o caso, rastreando os ativos e coordenando as medidas junto às autoridades competentes. Manteremos atualizações regulares por aqui.

— Mercado Bitcoin (@MercadoBitcoin) November 2, 2026

Translated into English, the statement reads: "Official statement: We identified and quickly contained a security incident in one of our systems in the early hours of this morning. We reiterate that: there was no loss to customers, and there was no data leak. As a protective precaution, deposits and withdrawals are temporarily suspended. Our teams are mobilized investigating the case, tracking the assets, and coordinating measures with the competent authorities. We will continue to post regular updates here."

The platform stopped accepting deposits and withdrawals for a period as a precaution pending the investigation by its security teams. The company said it was working to track the assets and identify those behind the movements, and that it had established a cooperation plan with the relevant authorities. Halting these flows is a containment step commonly used during security investigations at centralized platforms, since it limits movement through the exchange while forensic teams assess what happened.

In a subsequent update, Mercado Bitcoin indicated that it was still working to safely restore operations to a normal state, but did not specify a definite date for the reopening of deposits and withdrawals. In the meantime, the company has committed to posting regular updates on its official X account.

More Than $40 Million in Suspicious Transfers Reported, Not Confirmed as Theft

Attention to the incident intensified after blockchain security firm Hypernative reportedly identified more than $40 million in suspicious transfers across roughly 10 blockchains. However, the reported transaction value should not be treated as a confirmed theft amount.

There has been no public verification that $40 million worth of customer or company assets were stolen from Mercado Bitcoin, and no breakdown of the flagged transfers has been published. The distinction matters: unusual on-chain activity can signal a security risk, but determining whether it stemmed from unauthorized access — and which assets were involved — requires further evaluation. Flagged totals in security incidents are typically snapshots of observed transfers produced by monitoring tools, with any verified loss figure established only after an investigation concludes.

Wallet Addresses Published for Blockchain Tracking

In a follow-up announcement, Mercado Bitcoin revealed a set of destination addresses linked to the movements under investigation. The list covers EVM-compatible blockchains as well as Bitcoin, Solana, Stellar, and TRON.

According to the exchange, the addresses were shared solely to assist in asset tracking and identification. Blockchain monitoring services and other market participants can watch these destinations for additional movements connected to the incident. The multi-chain scope reflects how suspicious assets can traverse different blockchain networks, which complicates monitoring and tracking efforts. Publishing the destination addresses publicly also lets analytics teams configure automated alerts on those destinations, extending visibility to downstream movements as funds cross between networks and services.

Investigation Continues With Services Still Suspended

Mercado Bitcoin has not disclosed further technical details about the incident, the systems affected, or whether any exchange wallets were compromised. What has been confirmed so far is the company's response: containing the incident, suspending all deposits and withdrawals to help protect users, publishing tracking addresses, and cooperating with the authorities.

The $40 million figure remains a reported estimate rather than an amount confirmed as stolen by the exchange. Customers are being directed to follow the platform's official communication channels for updates on the investigation and the restoration of services. From here, the observable markers of progress are concrete: an announcement on when deposits and withdrawals will be re-enabled, any additional activity at the published destination addresses, and any technical findings from the exchange or the authorities that clarify what system was affected and what the flagged transfers represent.