$48.6M Drained Across 11 Chains: Mercado Bitcoin Lied About Stopping the Hack
Thousands of customer deposit addresses were drained hours after Mercado Bitcoin publicly announced it had contained its breach on Monday, and blockchain data now proves it.
Fresh forensic analysis tracked $48.6 million moving across 11 separate blockchains, painting a picture that directly contradicts the Brazilian exchange's official statement. This wasn't a minor discrepancy. This was customers watching their funds disappear while the exchange told them everything was fine.
What the Blockchain Actually Shows
On-chain data doesn't lie, and it doesn't do PR. Investigators tracing the exploit found a methodical, multi-chain operation that continued well after Mercado Bitcoin declared victory over the attacker. Eleven blockchains. Thousands of wallets. Millions of dollars. All moving after the supposed all-clear.
The scale here matters. This wasn't one chain, one token, one mistake. Whoever executed this breach knew exactly what they were doing, routing funds across enough networks to maximize confusion and minimize the chance of a freeze. It's the kind of sophistication that suggests either an inside job or a highly coordinated external attack with significant resources.
Why Exchanges Keep Getting Away With This
The playbook is painfully familiar. Exchange gets hit. Exchange issues a vague statement about a "contained incident." Blockchain researchers dig in and find the real number is bigger, the damage wider, and the timeline uglier than anything the company admitted.
Mercado Bitcoin is Latin America's largest crypto exchange by volume. Its users trusted it with real money. That trust just got tested in the worst possible way, and the response was a statement that blockchain forensics now shows was, at minimum, dangerously premature and, at worst, deliberately misleading.
Brazilian regulators will be watching. The country has been building out its crypto regulatory framework aggressively, and a breach of this size at the market's dominant player is exactly the kind of event that accelerates uncomfortable legislation.
What You Should Be Watching Right Now
If you hold funds on any centralized Latin American exchange, this is your signal to audit your exposure. Cold wallet. Not your keys, not your coins. That principle exists because of exactly this scenario.
Watch for Mercado Bitcoin to issue a revised statement as the forensic pressure builds. Watch also for Brazilian regulators to respond publicly, which could send shockwaves through the region's broader crypto market.
And watch the wallets. On-chain investigators are still tracing the funds. If the attacker attempts to move through a major mixer or bridge to Ethereum, there may still be time for intervention.
The hack isn't over. The cover story just collapsed.