Mercado Bitcoin has suspended deposits and withdrawals after a security incident in one of its systems.
The company official updates, starting on 2 November 2026, and the latest one puts the value of the assets involved at about US$38M .
This Mercado Bitcoin hack, which the company itself calls a security incident, is still developing.
In its first official statement, the exchange said it identified and swiftly contained a security incident in one of its systems early that morning.
It stressed two points: there was no harm to customers, and there was no data breach.

As a precaution, the exchange temporarily suspended deposits and withdrawals.
It also said its teams were investigating the case, tracking the assets and coordinating measures with the competent authorities. Finally, it promised regular updates on the same account.
The statement does not name the affected system. It also does not explain how the incident happened, so any claim about the cause would be a guess.
The table below shows how the three updates built on each other:
Update | Main focus |
First | Incident contained; no customer harm or data breach; deposits and withdrawals paused |
Second | Work to restore operations; tracking addresses shared |
Third | About US38Minvolved;US11M blocked; services return when security allows |
The second update added two things. First, it said it continues working to restore operations safely and will keep customers informed through its official channels.

Second, it shared the destination addresses identified in the transactions linked to the incident. The goal, it said, is to help monitor and trace assets on blockchain networks.
It added that these addresses are disclosed only for identification and tracking. A blockchain address works like an account number, and every transfer on a public blockchain can be followed.
The table below lists the networks covered:
Network | Address shared |
EVM networks | 0xe485e7A70b1131216Cb47CA4555c4Bbb2C742478 |
Bitcoin | 19qGpsHvzh1t6pVi526XNNkh6hW6prDZp |
Solana | 3YX6WHncP1Ra4AotE9YLawFt4nPmxyux288FWXkEW97J |
Stellar | See the official post |
Tron | TEX3HuDRHRa3tnYpy96M4UfSx62VhDyA5L |
The Stellar address is not copied here because long addresses are easy to mistype. Anyone who needs it should copy it directly from the official post.
EVM stands for Ethereum Virtual Machine. Many blockchains use this design, so one address format can appear across several networks. That is why a single EVM address can be useful for tracking.
The latest update gives the first numbers. It said the value of the assets involved is approximately US38M.It also said it acted quickly with the cryptocommunity and strategic partners, including Tether, Circle, Paxos, BRL1 and Chainalysis. Together, they have already blocked US11M.

Here is a quick summary of the figures:
Item | Amount or status |
Assets involved | About US$38M |
Already blocked | US$11M |
Other amounts eligible for blocking | Identified, no figure given |
Containment efforts | Continuing |
Tether, Circle and Paxos issue stablecoins, and Chainalysis is a blockchain analysis firm.
In simple terms, these partners can help freeze or follow stolen tokens, which is why their names matter.
When an issuer freezes tokens at an address, those tokens can no longer be moved. A freeze does not return the funds by itself, but it stops them from being sold or sent on.
Other amounts eligible for blocking have also been identified, while it keeps working to contain the situation.
The most important message for users is the exchange’s promise that they will not suffer any loss of assets because of the incident.
To protect customer assets fully, it said it activated its security protocols and temporarily suspended access to services.
Based on the three updates, the current situation is as follows:
Deposits and withdrawals are temporarily suspended
Access to services has been paused as a preventive step
No customer data was leaked, according to the exchange
Services will return only when full security conditions are met
Any dates will be shared only through official channels
That point about channels is repeated, so users should be careful. During any crisis, scammers often pretend to be the affected firm.
Never share passwords, recovery phrases or codes with anyone, and do not click links from unknown messages about the incident. A few more habits can help:
Check that updates come from the exchange’s own verified account
Turn on two-factor protection for every account you use
Ignore anyone who offers to “speed up” a withdrawal for a fee
The exchange says it acted fast by freezing services, sharing tracking addresses, and working with partners to block US$11M.
Still, the Mercado Bitcoin hack remains an open case, because the cause, the final loss figure, and the reopening date are not yet public.
Customers should rely on the company’s official channels and wait for confirmed updates.
This article is for educational and informational purposes only and is not financial or investment advice. Crypto assets are high risk, their prices can be very volatile, and you can lose some or all of your money. Always do your own research and consider speaking with a licensed financial advisor before making investment decisions.