Signal Snapshot
- Mercado Bitcoin started phased read-only access on Monday after an estimated $49 million hack.
- Customers can see balances as of Nov. 2. Withdrawals stay paused with no date given.
- Access was set to open at 19:00 UTC. Full visibility was expected by 21:00 UTC.
- The exchange says it will use its own funds to replace the stolen assets.
- The top risk is a long freeze on withdrawals that hurts trust with retail users in Brazil.
- Bitcoin traded near $75k at the time. Polymarket traders priced further downside risk in November.
Key Takeaways
- Mercado Bitcoin restored view-only balances a week after the hack, but withdrawals remain paused.
- The move matters because trust and access to funds decide if users stay after a security event.
- The real read is simple. Seeing a balance is not the same as moving it.
What Happened
Crypto exchange Mercado Bitcoin began restoring read-only access to customer accounts in phases on Monday. The restart came a week after attackers drained an estimated $49 million from the platform. Customers can now view their pre-hack balances as access returns. The exchange has yet to say when withdrawals will resume.
A Mercado Bitcoin spokesperson told Cointelegraph that access would begin at 19:00 UTC. All accounts were expected to be viewable by 21:00 UTC. Customers will see their holdings as they stood on Nov. 2, the day of the hack. That date freeze gives users a clear record. It also stops confusion about later price moves.
In a video posted to the exchange’s X account, Fabricio Tota spoke about the plan. Tota is vice president of new business. He said Mercado Bitcoin hoped read-only access would reassure customers that their assets were still recorded on the platform. The message was calm and direct. It aimed to show that account records stayed intact.
The company framed the slow restart as a more conservative approach to bringing accounts back online. Tota said the care was meant to ensure the return happens with the utmost security. The caution follows concerns from blockchain security analysts. They noted the attackers were able to reach addresses and drain funds through standard transfers.
Mercado Bitcoin is one of Brazil’s largest crypto exchanges. It told Brazilian magazine Veja in late October that it had more than 4.8 million customers. It had also processed over 215 billion Brazilian reais in total transactions, worth about $39 billion. That scale explains why the restart matters. Millions of users want to know their funds are safe.
The exchange says it is using its own funds to cover losses. It has yet to give a date for withdrawals to resume. For now, users can look but cannot move funds. That gap is the key fact to watch.
Why It Matters
This is a security event with a company twist. The hack is the shock. The reopening plan is the test of how the firm handles it. Users judge an exchange on two things. Keep my coins safe. Let me move them when I want. Mercado Bitcoin has partly answered the first point. It has not yet answered the second.
View-only access helps in a clear way. It cuts rumors. It lets each user check a balance tied to Nov. 2. It shows the firm still has account records. That can lower panic and support calls. It can also slow the spread of false claims on social feeds.
But it does not fix cash flow for users. A trader cannot exit a position. A saver cannot move to self custody. A business cannot pay a bill. Time matters here. Each extra day without withdrawals adds stress. It also raises questions about cash on hand and hot wallet controls.
The promise to pay from company funds is important. It shifts loss from users to the firm. That can protect trust if the firm follows through fast. It can hurt trust if the timeline slips. Users will watch for proof, not words. Proof means withdrawals working again.
For crypto rails, this story hits exchanges and custody head on. An exchange is where most new users meet crypto. Custody is the back end work that keeps coins safe. When that back end fails, the front end loses faith. Stronger sign-offs, limits on hot wallets, and clear proof of reserves all get more focus after events like this. Other Brazil exchanges will feel that focus too. Regulators, banks, and partners will ask tougher questions.
Here is the deal. A fast and clean return of withdrawals would calm the story. A slow or vague restart would keep fear alive. Price charts do not capture that fear well. User trust does.
Token Metrics View
Polymarket consensus is the most useful extra lens right now. Token Metrics tracked three close Bitcoin markets for November. Traders priced a 68% chance Bitcoin dips to $72,500 in November. That level sits about $2,300 below the price at the time. They priced a 48% chance of a dip to $70,000. They priced a 30% chance of a dip to $67,500. You can see the shape in a Polymarket contract on Bitcoin dips. The read is plain. Near term downside was seen as likely.
Spot price adds context for that view. Bitcoin traded near $75k when Token Metrics logged the snapshot. It was down about 1% on the day. It was down about 3% over the past week. Market cap stood near $1.5 trillion. So the broad market was soft but not in free fall. That soft tape can make an exchange outage feel worse. Users see red prices and locked accounts at once.
Token Metrics classed this item as a market snapshot. That tag means the data point is about price and mood, not a buy or sell call. It helps frame the hack news. The hack did not happen in a strong uptrend that forgives bad news. It happened while traders were already braced for lower prices. You can track that brace in a second market on lower levels and a third market on deeper dips.
What does this mean for a normal reader. First, do not mix market risk with platform risk. Bitcoin can fall and still be easy to move. A locked exchange account is a separate risk. Second, watch flows and access, not just price. A balance you can see but cannot withdraw has less use right now. Third, use small tests when withdrawals return. Move a small sum first. Then wait for it to land. Then move more if you need to.
Token Metrics will keep tracking price, mood, and prediction markets around this story. The core signal stays the same. Access without withdrawals is progress. It is not a fix.
Market Context
This story fits best as a security event. Money left the platform without permission. The firm is now in repair mode. It is also a company event. How leaders act now will shape the brand for years. And it is a market structure story for Brazil. When a top local venue pauses withdrawals, local liquidity gets thin.
Exchange hacks follow a known path. First comes the loss. Then comes the pause. Then comes read-only access. Then comes a phased return of moves. Each step needs clear notes to users. What was lost. Who pays. When moves resume. What changed in security. Mercado Bitcoin has shared the first parts. It still owes users the last parts.
The size lens helps. An estimated $49 million loss is painful. It is small next to $39 billion in total past volume. It is large next to one week of user trust. Users do not think in volume ratios. They think in plain terms. Can I get my money out today. That is why the withdrawal date matters more than any past volume record.
The user base lens also helps. More than 4.8 million customers is a big crowd. Even a short outage creates many support tickets. Phased access by time slots can help systems stay stable. The stated window from 19:00 UTC to 21:00 UTC points to that care. A slow open can stop logins from crashing. It can also give staff time to spot odd activity.
The method detail matters too. Reports pointed to standard transfers from reached addresses. That sounds less exotic than a deep smart contract bug. It points to keys, permissions, and signing controls. Those are custody basics. Firms often tighten signer rules, add delays, and split funds across cold storage after such cases. Watch for Mercado Bitcoin to spell out those steps in plain words.
Brazil context adds weight. The country has a large and active retail base. Local venues carry real trust. A clean fix can lift the whole local market. A messy fix can push users to global venues or to self custody. Either shift would change where reais meet crypto orders.
Risks to Watch
Withdrawals
A long pause would hurt trust. Watch for a firm date and phased limits.Funds
The firm pledged its own cash to fill the gap. Watch for proof that payouts are funded.Security
Attack details are still thin. Watch for a full post mortem with fixes and dates.Trust
Rumors grow when accounts are locked. Watch support times, clear notes, and steady access.
What would make this story matter less. A quick return of withdrawals with no new loss would cool fears fast. A clear post mortem with named fixes would also help. If users can move funds freely and see stronger controls, the headline fades to a bad week, not a broken venue.
What to Watch Next
- Withdrawal restart date and order. Look for which assets and users go first.
- Daily access status. Look for read-only staying stable with no new pauses.
- Proof of company payback. Look for on chain moves or audited notes that funds were replaced.
- Security update from the team. Look for what was breached and what changed in signing rules.
- Local market reaction. Look for volume, spreads, and user chatter on Brazil venues.
This is information only, not investment advice. Use it to track facts and risk, not to pick trades.
Sources / Data Used
- Mercado Bitcoin phased reopening report
- Token Metrics data used: BTC spot price and moves, market cap, Polymarket consensus on November dip levels, and Daily Pulse market snapshot tag.
