Mercado Bitcoin, Brazil's largest crypto exchange, suspended deposits and withdrawals on Monday, November 2, 2026, after a security incident in one of its systems overnight. Its statement on X was short: the incident was identified and quickly contained, no customers were harmed, no data leaked. As a precaution, deposits and withdrawals stay suspended while its teams investigate, trace the assets, and coordinate with authorities.
The numbers circulating outside that statement are larger than anything the exchange has admitted. Security firm Hypernative flagged more than $40 million in suspicious transfers from wallets it attributes to Mercado Bitcoin, spread across at least 10 blockchains including Bitcoin, Ethereum, Solana, and Tron. Arkham analyst Emmett Gallic put the running tally above $46 million by Monday morning US time. Mercado Bitcoin has confirmed neither figure as its loss.
The money moved like ordinary transfers
According to findings shared by Opsek founder Pablo Sabbatella, most of the money moved in a 34-minute window, from about 06:19 to 06:53 UTC. Sweeps of the exchange's bitcoin deposit addresses to the same attacker had started earlier, around 02:15 UTC. Hypernative described the outflows as plain transfers, not a smart contract exploit, and said it was still unclear how the attacker gained signing access.
The attacker's estimated haul: about 2,852 ETH, 106 BTC, 10,700 SOL, and 6.7 million XLM, plus more than 200 other tokens in fresh addresses. Mercado Bitcoin later published destination addresses it had identified across EVM networks, Bitcoin, Solana, Stellar, and Tron. The bitcoin address it named received about 106.07 BTC in seven transactions on November 2. Tether, meanwhile, froze more than 4.5 million USDT tied to the incident.
What is still unanswered
Three things are still missing. The exchange has not named the compromised system, has not given a reopening date, and has not said whose funds moved. So the "no harm to customers" line should be read for what it is: an assurance about customers, not confirmation that no exchange assets left. While withdrawals stay suspended, customers still cannot move their funds out, whatever the loss turns out to be.
Also missing: any public evidence linking this incident to last week's $6.3 billion Binance hack. The timing is close enough to put the market on edge, but closeness in time is not proof of a connection. The full Binance hack story and its first-day outflows are in our first-day outflows article. A different third-party route into a platform, through a site script, is in our Polymarket article. And as always after an incident like this, ignore any "refund" or "claim" page that does not come from Mercado Bitcoin's own channels.
Sources: Mercado Bitcoin statement on X (Nov 2, 2026), Decrypt (Nov 2, 2026), Unchained (Nov 2, 2026), Bitcoin.com (Nov 2, 2026). Figures are snapshots at writing time, early November 3, 2026 WIB, and can change.
Written by Mastechon
Writing about crypto and Super Intelligence: market news, new projects, Super Intelligence models, and early opportunities like airdrops and testnets. Every piece starts from the official announcement, with the costs worked out up front.
From November 3, Anthropic adds an invisible watermark to 4 older Claude models. It changes nothing you read, but two models carry it only at default settings.
Binance finished the zero-knowledge proof for its October 31 snapshot: 10 tokens are now user-verifiable at 1:1. What changed, and what it does not cover.
Meituan released LongCat-2.5 on November 2: a multimodal model for long coding work, scoring 88.4 on Terminal Bench. Its parameter count is still disputed.
US spot Bitcoin ETFs lost $643.3 million net on Friday, October 30, their largest since June 25. Ether funds lost $155.9 million, yet Bitcoin rose to $78,491.
Apple and Alibaba announced October 31: Qwen will power Apple Intelligence in China. Developer beta starts November 4; public release with iOS 27.3 in December.
Binance reopened withdrawals in phases on November 1; the first 9.5 hours saw a net outflow of $3.64 billion, 2.1% of reported assets. Flows are stabilizing.
A page-speed script from DebugBear on Polymarket's site was replaced with malicious code on October 29. It used signed-in traders' sessions to move positions, hit 726 wallets, and Polymarket refunded $3.9 million.
DeepSeek released its open-source Super-agent prototype on October 31: a coding agent that watches team chat and proposes fixes without being called. What shipped, its limits, and safe pilot conditions.
Google's prototype satellite answered its first prompt from orbit with a haiku from the Gemma 4 model. What it proves, its limits, and the twin-satellite plan for 2027.
Binance opened phase one withdrawals November 1 and says 95% of the $6.3B stolen is replaced. What changed since the midday schedule, and what is still pending.
Binance has set phase one of its withdrawal reopening for today, November 1, 06:00-09:00 UTC across 15 networks. Here is the schedule, Binance's own warning, and what is still unproven.
The FBI says North Korea was behind the October 29 theft from Binance and asks crypto firms to block hundreds of linked addresses, as most of the stolen funds are converted into ether.
Bitcoin staking platform b14g paused affected contracts after unauthorized withdrawals on October 31; about 68 million CORE is still traceable on the Core network and 9 million was frozen by exchanges, while staked BTC was unaffected.
ICE and Trade[XYZ] agreed to build a regulated perpetuals venue on Hyperliquid, HYPE jumped to near $90, but nobody has said whether fees from the US venue flow back to HYPE holders.
Two days after the $6.3 billion hack, Binance says 10 major assets are fully backed, the remaining 10% is still being sourced because those tokens are less liquid, and full reserve proof is due November 3.
Mistral opens a 1-trillion-parameter model to everyone, Google locks down its top-ranked model, Bitcoin steadies after the Binance hack, plus a free VPS and free Super Intelligence video that are still live.
A cross-checked roundup of what X is talking about: the largest hack in crypto history at Binance, Bitcoin's market reaction, trending coins, and this week's open airdrop claim windows.
What a crypto airdrop is, why projects give away free tokens, the requirements they usually ask for, and the realistic outcomes to know before you start.
Testnets use fake money, but your accounts and wallet are real. How to join testnets safely: a dedicated wallet, official faucets, and verification habits.
