The Brazilian exchange Mercado Bitcoin has thrust itself into the spotlight due to a "security incident announcement": without disclosing the specific time of the attack, the methods used, or the scale of the assets affected, the exchange admitted that assets had been transferred out and released a set of targeted addresses. The on-chain footprint spans five networks: EVM, BTC, SOL, XLM, and TRON. Subsequently, citing "precautionary measures," the exchange pressed the pause button on deposits and withdrawals, while emphasizing that customer assets were not harmed, nor was there any data breach. What truly propelled this regional incident out of the Latin American market was the statement from Tether CEO Paolo Ardoino on November 2, 2024— the issuer of USDT has already exercised contract control, freezing over 4.5 million tokens related to this incident, clearly marking the amount related to the incident on-chain. According to AiCoin data, during the period from October 26 to November 1, the overall market value of dollar-pegged tokens had already decreased by approximately 4.53 billion dollars, and during the same period, liquidations across the network totaled about 176 million dollars. Both long and short positions have borne costs amid high leverage volatility; although there is currently no evidence to suggest a direct causal relationship between these indicators and the Brazilian incident, the combination of asset contraction and extreme leverage volatility in market sentiment led investors to question the risk control capabilities of the exchange and the boundaries of the "ultimate switch" held by the issuer.
Brazil Exchange in Urgency: Multi-chain Funds Transferred
Just as market sentiment was already tight, Mercado Bitcoin, one of Brazil's leading exchanges, admitted to experiencing a security incident and took the rare step of proactively disclosing a batch of fund transfer target addresses. These addresses span five networks: EVM-compatible chains, Bitcoin, Solana, Stellar, and TRON, indicating that the relevant assets were not simply transferred on a single chain but were split and sent to multiple ecosystems. This path design naturally led the outside world to think of the typical "multi-chain slicing" technique: without further on-chain details disclosed, who triggered these transfers at what time and whether there would be subsequent redistributions can only be tentatively deduced from the public address list, while the true whereabouts of the assets are obscured by layers of networks in a short time.
In the face of sudden security pressure, Mercado Bitcoin emphasized in its announcement that customers had not suffered losses and that the platform had not experienced any data leaks. On the other hand, it chose to pause deposits and withdrawals as a way to "stop the bleeding," attempting to freeze the system status within a controllable range before risks further overflow. However, coexisting with this "reassurance" are many unanswered questions: the precise time of the incident, the specific methods of attack or anomalies, the types of assets affected, and the total scale, all remain undisclosed by officials. In this information structure, all investors see is that a leading local exchange's multi-chain funds were forced to migrate, but how large this security storm is and whether it will continue to spread remains a mystery yet to be solved.
Tether Intervenes to Freeze 4.5 Million USDT
While Mercado Bitcoin maintained the appearance of calm under the guise of "no customer losses," the issuer of USDT had already intervened at the contract level. On November 2, 2024, Tether CEO Paolo Ardoino publicly stated that Tether had frozen over 4.5 million USDT related to this security incident. This is not merely a symbolic gesture but a practical action to list specific addresses for freezing, causing the USDT balance on those addresses to lose its usability on-chain. According to public information, this freeze targeted addresses related to the security incident disclosed by Mercado Bitcoin, rather than random accounts, reflecting a coordinated action chain whereby the exchange disclosed suspicious addresses, and the issuer executed freezes based on that.
However, this seemingly swift action does not adequately depict the full scale of the incident. The current situation still leaves the total scale of assets transferred in this security incident unknown, and it is unclear whether the frozen 4.5 million USDT represents "core losses" or is merely the "tip of the iceberg." It is also unclear whether more related addresses will be added to the freeze list in the future. In the absence of these key variables, drawing conclusions solely based on the figure of 4.5 million could likely either underestimate the risk or overestimate the scope covered by Tether's actions.
A Dilemma Between User Protection and the Shadow of Oversight
From the perspective of on-chain execution, Tether's decision to freeze USDT on addresses related to Mercado Bitcoin acted as an "emergency brake" on the attack path. While details of the security incident have yet to be disclosed, quickly locking down over 4.5 million USDT indeed helps to limit further losses and buys the exchange time for investigation and remediation. This ability to directly "shut off" specific addresses on-chain has previously been viewed as a tool for centralized issuers to protect users and cooperate with security responses in extreme situations.
However, it is equally important to note that this freezing power means that issuers can unilaterally intervene in the fate of address assets on-chain. In this case, how the exchange and Tether define "involved addresses," who decides the approval process, and what the triggering criteria are, remains unknown to the public, naturally amplifying user concerns over oversight, collateral damage, and the boundaries of power. A more realistic point is that only a portion of the USDT assets has been announced as frozen, and other tokens or asset types potentially involved in the incident, as well as the overall loss scale, remain undisclosed by officials. The risk management is far from a "complete rollback," and before more details are made public, users can only weigh the trust costs between this "emergency brake" and the potential shadow of oversight.
Stablecoin Contraction Combined with Contract Liquidation Pressure
Zooming out from a single exchange, the entire market has also been quietly tightening during the same timeframe. According to AiCoin data, from October 26 to November 1, the total market value of stablecoins decreased by approximately 4.53 billion dollars; under the shadow of the security incident and oversight disputes, this contraction appears more like a defensive posture of "standing aside." However, capital has not collectively exited the table. During the same period, according to AiCoin data, DEX spot trading volume was approximately 54.71 billion dollars, rising about 24.06% compared to the previous period, while perpetual contract trading volume was around 150.83 billion dollars, up about 5.79% from the previous period, indicating that participants continue to hedge and speculate on-chain, albeit with more caution.
The costs of short-term volatility have already impacted the leverage book. According to AiCoin data, approximately 176 million dollars worth of liquidations occurred across the network in the last 24 hours, with long positions slightly higher than short positions, resulting in both sides being forced to "pay tuition" amidst high volatility. It is important to emphasize that there is currently no evidence that this round of stablecoin contraction, the increase in on-chain trading volume, and contract liquidations have a direct causal relationship with the Mercado Bitcoin security incident; they seem more like multiple signals appearing concurrently during the same phase, reflecting the tense state where the market guards against black swans while continuing to probe high-risk assets.
The Game of Security and Trust Amidst the Aftermath of the Incident
From the perspective of the event involving Mercado Bitcoin, there are at least two lines of defense for user assets: one is the exchange's own security architecture and risk control processes, and the other is the ability of issuers like Tether to exercise freezing powers under extreme circumstances. The former determines whether assets will be transferred out in the first instance, while the latter reflects whether remediation can be achieved by "pulling the lever" on-chain during the "aftermath remediation" phase. Currently, Mercado Bitcoin has only confirmed the security incident occurred, acknowledged multi-chain funds were transferred out, disclosed target addresses, and paused deposits and withdrawals while emphasizing that customers were unaffected and no data breach occurred. More details remain blank; correspondingly, Tether CEO stated on November 2 that over 4.5 million USDT linked to this incident, spanning EVM, BTC, SOL, XLM, and TRON networks, have been frozen. This action effectively "frozen" part of the involved assets on-chain and reminds the market that such dollar-pegged tokens can be centrally intervened by the issuer when necessary. The multi-chain diffusion path indicates that once a security incident occurs, funds can be rapidly split and scattered across multiple chains. It is challenging for a single platform, be it an exchange or an issuer, to independently complete tracking and handling; cross-chain and cross-platform collaboration will be key to controlling such events within a localized scope in the future. Looking back after this storm, during a period where the overall scale of dollar-pegged tokens has been reduced according to AiCoin data, and contract volatility has intensified, the variables worth closely observing in the next similar incident will include: to what extent and at what pace the exchange publicly discloses key information and decides to pause or resume services; and under what evidentiary threshold and risk assessment the issuer would again use its freezing power. These choices will continually reshape users' understanding of the boundaries of "security" and "trust."
Join our community to discuss together and become stronger!
AiCoin exclusive Hyperliquid benefits: https://app.hyperliquid.xyz/join/AICOIN88
AiCoin exclusive Aster benefits: https://www.asterdex.com/zh-CN/referral/9C50e2
On-chain Telegram community: https://t.me/AiCoinWhaleData
On-chain community: https://www.aicoin.com/link/chat?cid=N6OVMor5g
AiCoin on-chain Twitter: https://x.com/aicoinwhaledata
免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到[email protected]，本平台相关工作人员将会进行核查。
