Brazil's Mercado Bitcoin Halts Deposits and Withdrawals After Security Breach

Mercado Bitcoin, one of Brazil's largest cryptocurrency exchanges, has suspended customer deposits and withdrawals after detecting a security incident in one of its internal systems, the company said on November 2.

The exchange said it identified the problem early Monday morning and moved quickly to contain it, describing the freeze on fund movements as a precautionary step taken while its security teams investigate. Mercado Bitcoin did not say which system was compromised, whether any digital assets left the platform without authorization, or when deposit and withdrawal services would be restored.

Customers were told their funds and personal information were not affected. The company said no data breach had occurred and that it was tracking assets as part of the investigation, in coordination with unspecified authorities. It pledged to issue further updates through its official channels as the probe advances.

The announcement left several operational questions open. Mercado Bitcoin did not identify any affected cryptocurrency, blockchain network or wallet address, did not estimate the value of assets potentially involved, and did not say how many accounts might be connected to the incident. It also did not clarify whether spot trading and other platform functions were operating normally during the deposit and withdrawal freeze.

The incident lands amid one of the busiest stretches of security trouble the digital-asset industry has seen this year, with three separate episodes unfolding within days of one another.

Note: Figures and dates are as disclosed by each platform.

The largest of those events centered on Binance, the world's biggest centralized exchange by volume. The company said attackers compromised an engineer's laptop and used access to internal infrastructure that processes withdrawals, though it found no sign that wallet private keys had been exposed. Binance subsequently worked with blockchain security firms, stablecoin issuers and law enforcement to trace the funds, and by October 30 reported that roughly $3 billion of the affected assets had been frozen on-chain. It committed more than $6.34 billion from its Secure Asset Fund for Users and corporate funds to cover customer losses, and said it had replaced 95% of the stolen assets by November 1.

The Binance breach spilled into decentralized finance. Aave temporarily restricted several markets after a wallet tied to the attacker deposited 60 million USDT and borrowed 19,762 WETH before controls took effect. Guardians of the lending protocol froze new deposits and borrowing across 175 V3 reserves and 117 V4 reserves while allowing withdrawals, loan repayments and liquidations to continue. The markets reopened on October 30 after additional risk measures were added, and Aave maintained its smart contracts were never compromised.

Separately, bitcoin payment processor BTCPay Server issued an emergency alert on November 1 warning of unauthorized withdrawals from hot wallets connected to some installations. The open-source project initially told operators to shut down servers, then narrowed the suspected attack path to installations running version 2.4.1 or earlier. It has not disclosed the total value taken or the number of installations affected, and hosting providers including LunaNode took precautionary steps to shut down some deployments.

Mercado Bitcoin's silence on the technical details of its own case contrasts with the disclosure cadence of the other incidents, and the absence of a resumption timetable keeps an unknown volume of customer capital locked on the platform. For a Brazilian exchange, the timing is particularly sensitive: the country has been building out a formal licensing regime for digital-asset service providers, and operational failures at a domestic market leader could color how regulators and institutions view the sector's readiness.

The broader market read so far has been calm. Bitcoin has held relatively steady through the run of incidents, a pattern analysts have attributed to the asset's growing separation from the fortunes of any single venue. The distinction matters because an exchange breach only becomes a supply shock for bitcoin if compromised coins are moved to market and sold; a systems intrusion that does not force liquidations can leave spot prices largely untouched while inflicting reputational and regulatory damage on the platform itself.

What traders are watching is exchange reserve data. A sustained shift of coins off centralized venues into self-custody would signal user flight and potential selling pressure, while derivatives funding rates turning sharply negative would suggest aggressive hedging. Neither signal has flashed decisively in response to the Mercado Bitcoin disclosure.

For the Brazilian exchange, the immediate test is operational: restoring deposit and withdrawal capacity without evidence of further loss. The company has said only that it will keep customers informed as the investigation develops.