Bitquery: Mercado Bitcoin addresses still drained after announcing attack containment

on November 6, according to Decrypt, on-chain analytics firm Bitquery stated that after Brazilian exchange Mercado Bitcoin announced it had contained the security incident, attackers continued to drain customer deposit addresses associated with the platform for nearly four hours.

Bitquery found that on November 2, a total of 36,042 Ethereum customer deposit addresses were drained, involving approximately $266,000; the firm tracked roughly $48.6 million in assets stolen across 11 blockchains during the incident.

The report pointed out that Mercado Bitcoin's latest estimate puts affected assets at around $36.3 million. Bitquery stated that the related transfers were directly authorized by the deposit addresses, leading to speculation that the attackers may have controlled the private keys or a system capable of signing transactions on behalf of the addresses.