Mercado Bitcoin, one of Brazil's leading cryptocurrency exchanges, has faced a major security breach that has raised concerns among its users. Despite the exchange's claims of swiftly containing the incident, new findings suggest that the attack resulted in significant losses, and the document underscores a growing issue that demands attention from the entire crypto community.
Attack Overview
On November 2, 2023, between 9:27 AM and 1:56 PM Brazil time, an attacker exploited vulnerabilities to drain deposit addresses, leading to the theft of over $48 million in assets across 11 different blockchains. Bitquery's blockchain analysis revealed that 36,042 Ethereum customer deposit addresses were compromised, with approximately $266,000 being siphoned off due to the attacker gaining access to private keys.
Response from Mercado Bitcoin
Mercado Bitcoin's public communications have not addressed the inconsistencies between their claims of containing the breach and the subsequent unauthorized transfers. In response to the incident, the exchange has pledged to cover user losses with its own funds and has advised customers against reusing old deposit addresses until the situation is fully resolved.
Future Plans
Looking ahead, Mercado Bitcoin plans to reopen on November 9, allowing users to view their balances, but has not yet provided a timeline for resuming deposits, withdrawals, and trading activities.
In light of recent security breaches in the cryptocurrency sector, CoinDCX has acknowledged a staggering loss of $159.9 million linked to its outdated wallet infrastructure. This situation contrasts sharply with Mercado Bitcoin's claims of containing its own breach. For more details, see read more.
