Brazil's Largest Bitcoin Exchange Promises Full Refund After $40 Million Hack

How Much Was Stolen and Who Is Blaming Whom

Mercado Bitcoin, the largest cryptocurrency exchange in Brazil, announced it will refund all affected customers after a cyberattack drained tens of millions of dollars from its systems. The breach occurred on November 2 and forced the platform to suspend all deposits and withdrawals.

The exchange confirmed that customers will not bear the financial loss from the incident. This commitment aims to restore trust after the security failure.

Estimates of the total loss vary widely among different tracking firms. Mercado Bitcoin itself cites a figure of roughly $38 million. Hypernative reports the amount exceeds $40 million. Arkham Analytics puts the loss at least at $46 million, while Chainalysis estimates it reached approximately $49 million. The discrepancies reflect differences in how each firm traces the stolen funds across blockchains.

Will Customers Actually Get Their Money Back

The attack targeted the exchange's hot wallets, which hold a portion of user assets for fast transaction processing. Hackers exploited a vulnerability in the withdrawal system to drain the funds.

The refund promise raises questions about the exchange's financial resilience. If the stolen amount approaches $49 million, the company must have sufficient reserves to cover the payout. Analysts note that smaller exchanges often struggle to honor such commitments, potentially leading to delayed or partial reimbursements.

Frequently Asked Questions

How long will withdrawals remain suspended? The exchange has not announced a specific timeline. Deposits and withdrawals are currently frozen while the company investigates and secures its systems.

What should affected users do now? Customers should monitor their accounts for the refund credit. The exchange stated that no action is required from users, but they can contact support for status updates.

Is the security fix confirmed? The company said it has patched the vulnerability and is conducting a full security audit before resuming normal operations.