Mercado Bitcoin will begin restoring customer access on November 9 after the security incident that forced the Brazilian crypto exchange to suspend operations earlier this week. According to Mercado Bitcoin’s November 4 update, the first phase will provide website-only access for customers to view balances, statements, holdings and investments, while trading and asset movements remain disabled. The company says no customer will absorb losses from the incident.
The reopening schedule is more limited than a return to normal operations. Brazilian financial publication Folha de S.Paulo confirmed that transfers, withdrawals and trading will be restored only in subsequent stages as individual modules complete final security validation. Mercado Bitcoin has not provided a date for restoring those transaction functions, leaving November 9 as a visibility milestone rather than a full operational restart.
Mercado Bitcoin Will Rebuild Affected Balances
Mercado Bitcoin says customer balances remain recorded and that it will replace affected assets using its own resources. Its trading desk is preparing to purchase the necessary cryptocurrencies in Brazilian and international markets before customers regain the ability to trade or withdraw them. That commitment is an asset-replenishment process, not the same as recovering the cryptocurrency already controlled by the attacker.
The company also says more than $15 million in assets connected to the attack have now been blocked with assistance from industry participants. Earlier disclosures identified Tether, Circle, Paxos, BRL1 and Chainalysis among the organizations involved in tracing and freezing funds. Frozen assets remain separate from recovered assets because immobilizing tokens does not automatically return them to Mercado Bitcoin.
That distinction recently became important after Binance used corporate resources and approximately half of the Bitcoin held in its SAFU reserve to replace assets following its $6.3 billion breach. Mercado Bitcoin is pursuing a much smaller replenishment operation, but the underlying accounting distinction is similar: replacing customer backing can restore exchange solvency before stolen assets themselves are recovered from the attacker.
Onchain Estimates Put Gross Outflows Near $49M
Independent blockchain reconstruction continues to refine the scale of the incident. Bitquery now estimates that approximately $48.6 million left Mercado Bitcoin-linked wallets across 11 blockchains on November 2, including assets removed from hot wallets and thousands of customer deposit addresses. That gross onchain estimate is close to $49 million, but it uses a different methodology from Mercado Bitcoin’s evolving figures for assets blocked or still outstanding.
Bitquery also found that 36,042 Ethereum deposit addresses were emptied between 12:27 and 16:56 UTC, continuing for roughly four hours after Mercado Bitcoin publicly said it had contained the incident. The finding does not establish the original compromise mechanism, but it indicates that stopping platform operations and neutralizing every affected signing path were separate stages of containment. Mercado Bitcoin has not yet published a complete technical root-cause report.
The phased reopening therefore places security validation ahead of immediate liquidity access. A recent comparison emerged after Binance restored withdrawals and subsequently recorded billions of dollars in net exchange outflows following its own security incident. Mercado Bitcoin will initially avoid that withdrawal phase altogether, restoring account visibility first and monetary movement only after additional testing.
The exchange says every environment and transaction flow is undergoing extensive independent tests before being reactivated. That sequencing is particularly relevant after a week in which the $6.3 billion Binance breach highlighted the operational risks surrounding exchange wallet infrastructure. For Mercado Bitcoin, November 9 will test whether customer access can be safely restored, while the more consequential milestone remains the later reopening of withdrawals, transfers and trading.
