Tether CEO Paolo Ardoino confirmed that the stablecoin issuer has frozen more than $4.5 million in USDT linked to a security incident at Brazilian cryptocurrency exchange Mercado Bitcoin. The freeze followed the exchange’s disclosure on November 2, 2026, that it had identified and contained a security issue in one of its systems early that morning.
Mercado Bitcoin temporarily suspended deposits and withdrawals as a precaution while investigating, tracking assets, and coordinating with authorities. The exchange stated that customers were not harmed and that no data breach occurred. It also published destination wallet addresses associated with the unauthorized transactions across multiple networks to aid monitoring. Blockchain analytics firms, including Arkham, have estimated the attacker’s holdings at approximately $40–$46 million (with some reports citing up to around $49 million across multiple chains), primarily in ETH, BTC, and various altcoins. Tether’s action represents a partial freeze of the stablecoin portion of the moved funds; it does not automatically return the tokens.
The Drivers of the Current Situation
The central development is Tether’s rapid freeze of over $4.5 million USDT connected to the Mercado Bitcoin security incident, occurring amid a multi-chain outflow estimated in the tens of millions. Confirmed elements include the exchange’s announcement of the contained incident and operational pause, Ardoino’s confirmation of the USDT freeze, the publication of destination addresses, analytics estimates of total value involved (around $40–$46 million or higher), the multi-blockchain nature of the transfers, and the exchange’s assertion that customers and data were unaffected. These steps reflect standard post-incident coordination between the platform, stablecoin issuers, and on-chain investigators.
Further recovery efforts, resumption of services, or additional freezes will mark the next milestones.
Impact and Broader Context
The freeze demonstrates the practical utility of issuer-controlled blacklisting for stablecoins in limiting further movement of stolen assets, while underscoring the challenges of recovering non-freezable holdings such as BTC and ETH. It raises questions about the scale of the overall loss relative to the frozen portion, the speed of exchange response and customer communication, the role of prior relationships (Tether has previously invested in Mercado Bitcoin), the pattern of recent exchange security incidents, and the effectiveness of multi-party tracking in containing damage. Coverage distinguishes between the confirmed USDT freeze and the larger estimated value still under the attacker’s control, as well as between the operational pause and any permanent customer impact (which the exchange has denied).
Additional analytics updates, official loss figures from Mercado Bitcoin, or progress on asset recovery will clarify the lasting effects.
This analysis draws from Mercado Bitcoin’s public statements, Tether CEO Paolo Ardoino’s confirmation, and contemporaneous reporting by blockchain analytics firms. Exact total losses, the status of remaining funds, and the timeline for full service restoration remain subject to ongoing investigation and further disclosures.