Just days after the record-breaking Binance breach, a second major incident hit the crypto industry. On November 2, 2026, Mercado Bitcoin — Brazil's largest cryptocurrency exchange — confirmed an attack on its systems and immediately suspended all deposits and withdrawals. Current estimates put the loss between $38 million and $49 million, with on-chain analysts still tracing where the stolen funds have moved.
A different attack method
Unlike many high-profile DeFi hacks that exploit a bug in a smart contract's code, reports indicate the attacker used ordinary, properly signed transactions to move funds out of the exchange. In practice, this usually points to a compromise further up the chain — such as stolen operational credentials, a breached signing device, or an insider-level access failure — rather than a flaw in blockchain code itself.
Why this matters even if you don't use Mercado Bitcoin
Two major exchange hacks within a single week show that no exchange, however large or established, is immune. It also illustrates an important distinction for anyone evaluating crypto risk:
- Smart-contract risk is about code quality and audits — relevant mainly to DeFi protocols.
- Operational/custody risk is about who can sign transactions on an exchange's behalf — and it affects every centralized platform, no matter how well-audited its public-facing code is.
For everyday users, the practical defense is the same regardless of which type of exchange is breached: minimize how much value you leave exposed to a third party's internal processes at any given time.
Takeaways
- Withdraw mining rewards and trading profits to your own wallet on a regular schedule, rather than letting balances accumulate on an exchange.
- Prefer exchanges that publish regular proof-of-reserves audits and have a transparent incident-response history.
- Keep a close eye on official exchange communication channels after any major industry hack — attackers often launch copycat phishing campaigns in the days that follow, impersonating support staff of the affected exchange.
