Brazil's well-known exchange has gone quiet, and many account holders want answers. The Mercado Bitcoin withdrawal pause began on November 2 after the platform spotted a security incident.
Deposits, withdrawals, and app access were all switched off as a precaution. The exchange says customer balances are still recorded in their accounts and no one will lose assets.
Official statements stay separate from outside estimates, since the two do not match yet.
Mercado Bitcoin is a Brazilian crypto exchange founded in 2013. It began as a bitcoin brokerage and now offers spot trading, staking, and payment services.
A withdrawal pause is a temporary block on moving assets out of an exchange. Platforms use it as an emergency brake when something looks wrong inside their systems. Here, the Mercado Bitcoin withdrawal pause is that brake.
The Mercado Bitcoin withdrawal pause goes further than that. Deposits were frozen too, and the app became unavailable.
Mercado Bitcoin is a centralized crypto exchange. It holds customer coins in wallets the company controls, so users hold a balance, not the keys. A pause stops that balance from moving until the system is safe again.
The exchange says it detected the incident in the early hours of November 2 and triggered its security protocols. Platform access was suspended to protect customer assets.
Its first estimate during the Mercado Bitcoin withdrawal pause put affected assets near $38 million. About $11 million had been blocked with help from stablecoin issuers and a blockchain analytics partner.
A November 3 update changed the numbers. The exchange now values the affected assets at about $36.3 million at current prices, with $12.9 million blocked.
| Item | First update | November 3 update |
| Affected assets | About $38 million | About $36.3 million |
| Funds blocked | About $11 million | $12.9 million |
| Platform status | Paused | Paused |
| Customer pledge | No loss of assets | No loss, balances still recorded |
Both figures are priced when each update was posted. Crypto prices move, so the same coins can show a different dollar value later. The available data suggests price changes may explain part of the drop, though the exchange has not confirmed it.
The exchange earlier said no customer data leaked. It has not explained how the incident happened.
Independent blockchain analysts have put the outflow behind the Mercado Bitcoin withdrawal pause higher. One estimate points to roughly $49 million drained across 17 blockchains, mostly in Bitcoin and Ethereum.
An early security-firm alert also topped $40 million across at least 10 networks.
Gaps like this are common after a hack. Analysts count gross movement out of wallets, while exchanges often report net exposure after freezes. The two numbers measure different things.
One detail stands out. The transfers reportedly looked like ordinary signed transactions, meaning they carried valid approval from a private key. How the attacker gained that ability remains unconfirmed.
The stated plan for ending the Mercado Bitcoin withdrawal pause is a gradual reopening. Each function returns only after it passes security checks, so some may come back before others. Every step is to be announced in advance.
Users do not need to reinstall the app or change devices, the exchange says. Timing will be shared only through its official X channel and other verified pages.

No reopening date exists yet. Until one is announced, the Mercado Bitcoin withdrawal pause stays in force.
Little can be done on the platform itself, but a few habits still protect account holders during the Mercado Bitcoin withdrawal pause.
News should come only from the official Mercado Bitcoin website and verified social accounts. Links sent by message, email, or comment are best skipped.
Any "recovery" offer is best treated as a scam, since crypto phishing scams often target frozen users with fake support agents and cloned sites.
A password, two-factor code, or recovery phrase should never be shared. Real support teams do not ask for them.
Keeping screenshots of balances, order history, and past transactions is a smart move, since they can back up a support request or settle a dispute later.
Once services come back, it makes sense to set a new password, review the two-factor settings, and look through recent account activity before any trading starts again.
After the Mercado Bitcoin withdrawal pause, the promise to cover losses sounds reassuring, but a promise is not the same as proof.
Its value depends on the exchange's reserves and how it funds any shortfall. Those details are not public.
The bigger question is control. If the transfers carried valid signatures, attackers may have reached the systems that approve withdrawals. The available data suggests a weakness in key management or approvals, not in the blockchains.
Exchanges keep most coins in cold storage, which stays offline, and a smaller share in hot wallets, which stay online for daily withdrawals.
Hot wallets keep daily withdrawals running, but that same convenience makes them the first thing attackers go after, which is why hot wallet security risks surface again after almost every major breach.
Brazil's rulebook also matters. The Central Bank of Brazil issued resolutions for virtual asset providers that require customer assets to stay separate from company funds, backed by independent audits. The exchange's updates do not say how those rules apply here.
| Term | Meaning | Who acts | Effect on users |
| Withdrawal pause | Exchange stops moving assets out. | The exchange | Balances stay recorded; access returns after checks. |
| Token freeze | The issuer blocks a stablecoin address. | The token issuer | Stolen stablecoins may be stopped from moving. |
| Insolvency | The company cannot cover its debts | Courts or regulators | Customers join a legal claims process |
The Mercado Bitcoin withdrawal pause fits the first two rows. Nothing in the exchange's statements points to the third. The distinction matters, since a pause can end within days while insolvency is far harder to reverse.
Native Bitcoin has no issuer able to freeze it, so stablecoin issuers' freezes only help with part of the stolen funds.
Waiting with no end date: The exchange has not said when services will return. The Mercado Bitcoin withdrawal pause may last a few days, or it may run well past that.
Numbers that keep moving: Crypto is priced by the minute, so the $36 million figure is only a snapshot. Tomorrow’s update could show a different dollar value for the same coins.
A cause nobody has explained: Investigators are still working, and whatever they find could change how big the incident looks.
Fake help arriving fast: Scammers tend to show up within hours of an event like this, often with a “restoration notice” that looks official. Careful crypto exchange security habits count for more than usual right now.
A promise without a plan: The no-loss pledge comes from the company, and it has not shown where the money to back it will come from.
The Mercado Bitcoin withdrawal pause began as a precaution after a security incident, and the exchange’s latest count puts the affected assets at roughly $36 million. Two things stand out: the promise that no customer will lose assets, and a plan to reopen services in stages.
Plenty is still unknown. The cause, the final loss figure, and the date the Mercado Bitcoin withdrawal pause ends have not been confirmed. Until they are, customers are better off sticking to official updates, ignoring unsolicited offers of help, and keeping their own records safe until service returns.
Disclaimer:
This article is for information only and is not financial or legal advice. Crypto assets carry high risk, and the situation may change as the exchange shares new details. Official channels should be checked before acting.