Mercado Bitcoin Freezes Outflows After $38M Breach

Mercado Bitcoin Halts Withdrawals Over Breach

Mercado Bitcoin confirmed a $38.00M security breach Monday morning after unauthorized transactions drained hot wallets across at least 10 distinct blockchains. Public statements issued by the Brazilian exchange verified that deposits and withdrawals were suspended immediately to prevent further capital flight. Blockchain monitoring firm Hypernative detected the first suspicious transfer at 2:15 UTC before the largest asset movements hit between 6:19 and 6:53 UTC. Wallets linked to the platform transferred funds to newly created addresses using standard cryptographic signatures. Investigators remain uncertain how the attacker gained authorization to sign those transactions.

Exchange executives managed to freeze $11.00M of the stolen capital through immediate coordination with Tether, Circle, Paxos, BRL1, and Chainalysis. Compliance teams identified additional funds eligible for blocking as containment protocols continued throughout the trading day. Exchange officials maintained that no customer data leaked during the incident despite the massive liquidity drain. Order-book access stayed frozen as engineers worked to establish full security conditions before resuming normal operations. Customers received assurances that corporate reserves would cover any potential shortfalls.

ZachXBT Flags Separate European Entity Theft

Blockchain investigator ZachXBT uncovered a separate $133.00M exploit involving suspicious withdrawals from centralized exchanges linked to an unnamed European entity. On-chain transaction records confirm that the suspect moved an additional $27.00M on top of a previously detected $106.00M balance. The attacker systematically converted stolen USDC and USDT into ETH before routing funds through instant exchanges like WellWallet and Kyrrex. Funds were subsequently swapped into privacy-focused token XMR through Wagyu across multiple blockchains. ZachXBT publicly criticized the victim entity for suppressing public disclosure of the security failure.

On-chain analysis ruled out North Korea's Lazarus Group based on distinct laundering patterns observed during the conversion process. ZachXBT insisted that law enforcement agencies across the European Union could have seized more than $30.00M if the institution had reported the breach immediately. Centralized platforms continue facing intense pressure regarding reserve safety following previous large-scale incidents. Market participants monitored liquidity pools closely as exchange security standards faced renewed scrutiny from institutional investors and regulators.