A security breach at Mercado Bitcoin has left a cryptocurrency exchange with $46 million stolen by attackers. Hackers accessed multiple wallets through 65 different addresses during the November 3, 2026 incident. The breach represents one of the largest crypto thefts this year.
Investigators quickly tracked the stolen funds, which include 106.068 Bitcoin worth approximately $8.1 million. The Bitcoin holdings came in second after an Ethereum account containing $8.26 million. Additional stolen assets include $5.03 million in Tether and $3.03 million in USD Coin, bringing the total confirmed theft to over $25 million.
The investigation revealed the attacker's remaining holdings continue to expose the market to significant risk. Despite more than $9 million being frozen by authorities, the hacker still maintains substantial positions in several vulnerable tokens.
The stolen altcoin positions represent serious market pressure. PEPE ($1.79M), AAVE ($1.61M), and PENDLE ($1.39M) together account for over $5.59 million and create the most immediate threat. These tokens carry particular danger because they would enter relatively illiquid market segments if sold.
The attacker also holds significant Uniswap and Ondo positions, which could trigger steep declines if moved to trading venues.
Market depth provides some protection for the stolen tokens. PEPE and AAVE each have daily trading volumes exceeding $230 million, which means concentrated sales could still overwhelm existing liquidity. PENDLE faces greater vulnerability due to its shallower market depth.
The absence of confirmed exchange deposits suggests the hacker hasn't begun large-scale liquidation yet, but any movement toward trading platforms could increase volatility for token holders.
The investigation highlights the ongoing risks in the cryptocurrency ecosystem. Even with frozen funds, the potential for additional sell-offs remains high, especially given the attacker's substantial altcoin positions. The situation shows the need for better security measures across crypto exchanges.
---
Q: When will investigators freeze more of the hacker's remaining assets?
**A: Authorities continue tracking the attacker's 65 wallet addresses to identify additional vulnerable tokens, with focus on PEPE, AAVE, and PENDLE which pose the greatest market risk.**
---