# Mercado Bitcoin's attacker kept emptying customer deposit addresses for about four hours after the exchange said the breach was contained

Bitquery counts 36,042 drained Ethereum deposit addresses and puts total losses at $48.6 million across about ten blockchains, above the $36.3 million figure in the Brazilian exchange's own FAQ.

- Published: 2026-11-07T05:47:17.298Z
- Canonical: https://polylog.news/crypto/2026-11-07/mercado-bitcoin-s-attacker-kept-emptying-customer-deposit-ad
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [Polylog editors](https://polylog.news), [Bitquery](https://bitquery.io/investigations/mercado-bitcoin-hack), [Decrypt](https://decrypt.co/382670/mercado-bitcoin-hack-contained-blockchain-data), [CoinDesk](https://www.coindesk.com/business/2026/11/05/mercado-bitcoin-hack-continued-hours-after-exchange-said-attack-was-contained-report-finds)

Mercado Bitcoin, the São Paulo-based exchange, said it had contained a breach on November 2. On-chain data shows the theft went on afterward. "Mercado Bitcoin claimed to have its hack under control. Yet the hackers kept emptying thousands o…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-11-07/mercado-bitcoin-s-attacker-kept-emptying-customer-deposit-ad (subscription information: https://polylog.news/pricing).