Mercado Bitcoin confirmed a security incident in which more than $46 million in cryptocurrency was drained from its wallets. Addresses tied to the breach continued to receive funds for hours after the exchange announced a temporary suspension of deposits and withdrawals. A company spokesperson said customers had suffered no losses and no data had leaked, but the company did not answer questions about the continued transfers.
Security firms said the funds moved through standard transfers, not a smart contract exploit. Certik engineer Dickson Wu said the attackers also moved small amounts of Ether from 27,160 addresses. The breach remains under investigation, and no organized group has been identified. By 16:42 UTC, about $6.2 million of the stolen funds had been frozen, about $20 million had reached newly created wallets, and more than $20 million remained in associated addresses identified by Mercado Bitcoin.