← The Polylog Crypto Intelligence Brief
Morning Edition · Saturday, November 7, 2026Published at 12:47 AM EST · New York
Mercado Bitcoin's attacker kept emptying customer deposit addresses for about four hours after the exchange said the breach was contained
Bitquery counts 36,042 drained Ethereum deposit addresses and puts total losses at $48.6 million across about ten blockchains, above the $36.3 million figure in the Brazilian exchange's own FAQ.
Mercado Bitcoin, the São Paulo-based exchange, said it had contained a breach on November 2. On-chain data shows the theft went on afterward. "Mercado Bitcoin claimed to have its hack under control. Yet the hackers kept emptying thousands o…
Continue the Crypto Intelligence Brief
Track on-chain flows, protocol shifts, stablecoins, and regulation.
- 5 crypto intelligence signals a day
- Tracked crypto trends, day over day
- Stablecoin and regulatory movement
- Source-grounded analysis with confidence labels
The Global Intelligence Brief stays free.
Part of a tracked trend
Exchange Back-Office Infrastructure Becomes the Main Theft Target
Large losses at centralized exchanges increasingly come from neglected operational systems, such as retired wallets, sweep services and third-party security software, rather than from the main custody stack, so exchange breaches will keep recurring until proof of reserves and operational audits cover the back office.
Townsquare
Start a discussion in Townsquare.
More from this edition
- Ethereum developers delay Glamsterdam's Hoodi testnet fork after ChainSecurity finds gas changes break eight contract assumptions
- US Treasury orders US banks to stop moving money for MEXC over $16 billion in alleged illicit flows
- Binance hackers convert stolen XRP to bitcoin through THORChain as the FBI names North Korea's TraderTraitor unit
- Nethermind tests show a self-funding privacy pool works on Ethereum frame transactions only if the unpaid validation cap rises
- Thieves took about $4 million in USDT from active TRON wallets as CertiK warns of an updated DarkSword iPhone exploit kit
- Miden launches its PriFi stack and Bread private wallet as Aztec ships an anonymous message board with automated moderation
- Initia is back online after a $2.6 million exploit that minted unbacked tokens, as Gnosis Pay discloses a card-data breach and a former FBI agent admits stealing $2.47 million
Comments
0No comments yet.