Hypernative Flags More Than $40 Million in Transfers From Mercado Bitcoin-Linked Wallets
Mercado Bitcoin suspended deposits and withdrawals after reporting a contained security incident. Blockchain security firm Hypernative estimated that more than $40 million in crypto moved from wallets it linked to the Brazilian platform. The exchange said clients suffered no losses and no data leaked. It had not confirmed Hypernative’s estimate or explained how the transfers were authorized.
- Reported outflows: More than $40 million across at least 10 blockchains, according to Hypernative.
- Assets highlighted: About 106 BTC, 2, 852 ETH and 6.7 million XLM, among others.
- Still unknown: Whose funds moved, how the transactions were authorized and whether assets were recovered.
Mercado Bitcoin said it detected and contained an issue in one of its systems and temporarily suspended deposits and withdrawals. The exchange also told clients their assets were safe and no data had leaked. Those statements do not establish which funds were involved or the full extent of the security incident.
Hypernative separately attributed more than $40 million in outflows to wallets linked to Mercado Bitcoin. That figure estimates transferred value, not a confirmed loss. The exchange had not confirmed the amount, and Hypernative described its address attribution as preliminary. Reports do not explain how the estimate was valued or which price snapshot was used.
What Moved, and When?
Hypernative reported about 106 BTC, 2, 852 ETH and 6.7 million XLM, the native token of the Stellar network. Its figures also included roughly 10, 700 SOL and more than 200 other tokens. Mercado Bitcoin has not confirmed these amounts.
Hypernative said the activity spanned at least 10 blockchains. Reports named nine: Bitcoin, Ethereum, Solana, Tron, Stellar, Polygon, Arbitrum, Avalanche and BNB Smart Chain. The tenth network has not been identified.
According to Hypernative, sweeps from Bitcoin deposit addresses linked to the exchange began around 02:15 UTC. A sweep gathers funds from deposit addresses and moves them to another wallet. The larger wave of transfers followed between 06:19 and 06:53 UTC.
Unchained reviewed a Bitcoin destination address that had received 106.07 BTC across seven transactions. A transfer of 104.43 BTC arrived at 06:41 UTC. At 14:58 UTC, Unchained found that none of the Bitcoin had left the address. That was a snapshot from the time of its review, not confirmation of the funds’ later status.
Hypernative described the activity as ordinary signed transfers, not a smart-contract exploit. A signed transaction is one the network accepts as authorized by the relevant cryptographic key. That alone does not show who signed it or how they gained access. The method behind the transfers remains unknown.
Mercado Bitcoin’s first public statement was reported at 12:56 UTC. Reports identify the day as Monday but do not give a calendar date. That means the status updates and balance checks reflect conditions at specific times, not the funds’ current position.
What the On-Chain Trail Can and Cannot Show
Public blockchains let investigators track assets between addresses and check balances at particular times. But activity at an address does not, by itself, prove who controls it, whether it belongs to an exchange, or whether the funds belong to customers or the company. A transfer is not automatically a realized loss. Recovery may still be possible, though tracing alone cannot guarantee it.
Claims that the movements involved operational reserves rather than segregated customer funds have not been established. Mercado Bitcoin has not said whose funds moved, and the available information does not describe its custody arrangements. The exchange’s assurance that clients suffered no losses matters, but it does not independently answer those questions.
Mercado Bitcoin reportedly published destination addresses to help security firms and others monitor the assets. The exchange said it was investigating, tracing the funds and coordinating with authorities, but did not name any agencies. Sharing addresses can help with monitoring and response. It does not guarantee recovery.
At the time of the reports, deposits and withdrawals were suspended, with no reopening date announced. Customers should check Mercado Bitcoin’s official status updates before trying to deposit or withdraw. Until the exchange confirms normal operations, a failed or delayed transaction is a risk worth avoiding.
Key Questions and Answers
-
Did Mercado Bitcoin confirm a $40 million loss?
No. Hypernative estimated that more than $40 million was transferred from wallets it linked to the exchange. Mercado Bitcoin had not confirmed the estimate, and the total value transferred is not the same as a confirmed loss.
-
How much Stellar was reportedly involved?
Hypernative reported about 6.7 million XLM, Stellar’s native token, linked to suspicious transactions. Mercado Bitcoin had not confirmed the figure.
-
What did Mercado Bitcoin tell clients?
The exchange said it contained an issue in one system, client assets were safe and no data had leaked. These are the company’s assurances.
-
Do the transfers reveal how access was obtained?
No. Hypernative described them as signed transactions, but the available information does not explain how signing access was obtained or who authorized the transfers.
-
When will deposits and withdrawals resume?
No reopening date was reported. Check Mercado Bitcoin’s official updates for the latest status.
The key unanswered questions are how much moved, whose assets were involved, how the transactions were authorized and whether any funds can be recovered. Until those points are clarified, treat Hypernative’s figure as an estimate of suspicious transfers, not a final accounting of Mercado Bitcoin’s losses.
