Crypto.News Mercado Bitcoin Suspends Withdrawals Amid $40M Security Incident
Article Content
- •Mercado Bitcoin suspended deposits and withdrawals on November 2 due to a security incident.
- •Hypernative estimates over $40 million was drained from the exchange's wallets.
- •Tether froze more than $4.5 million in USDT linked to the incident.
On November 2, 2026, Brazilian cryptocurrency exchange Mercado Bitcoin suspended all deposits and withdrawals following a security incident in one of its internal systems. The exchange reported that no customer funds were lost and no data breach occurred. However, blockchain security firm Hypernative estimated that over $40 million was drained from wallets associated with the exchange across multiple blockchains, including Bitcoin and Ethereum. Tether subsequently froze more than $4.5 million in USDT linked to the incident. Mercado Bitcoin is currently investigating the incident and has not disclosed specific details about how the breach occurred or the systems affected. The exchange has shared destination addresses for tracking suspicious transactions but has not provided a timeline for resuming services. The incident follows a major breach at Binance just days earlier, raising concerns about security in the cryptocurrency sector.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (17)
Following this threat?
Track Binance in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What caused the suspension of services?
How much money is involved in the incident?
When will services be restored?
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects… 
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…