Brazilian crypto exchange Mercado Bitcoin plans to restore account viewing gradually on Nov. 9, allowing customers to inspect their holdings while withdrawals and trading remain unavailable following its Nov. 2 security incident, according to the company's recovery plan.
Customers will be able to see balances by asset and category on the exchange's website. The app will offer a summary of holdings, with API access returning later. Deposits and transfers also remain unavailable, along with cards, payment services including Pix and TED, new products and account opening.
Historical Snapshot
The quantities shown will reflect customer accounts as of Nov. 2, before the incident. Valuations in Brazilian reais will use prices from that moment, with prices updated when trading resumes. This means customers can see a reference for their recorded holdings but cannot sell or withdraw those assets, and the displayed BRL valuation will not yet reflect subsequent market price movements.
Mercado Bitcoin says it canceled limit orders that were open when the platform went offline on Nov. 2. Customers will be able to submit fresh orders once trading returns.
Staking and Yield Impact
The exchange temporarily discontinued its Ethereum staking product for security reasons, so ETH in that product earned no return during the interruption. Other staking and digital-dollar passive-income products continued accruing, with accumulated passive-income returns to be credited when those products reactivate.
Next Stages and Security Requirements
The FAQ places Pix and digital fixed-income payments in the next recovery stage, with trading and cryptoasset transfers following later. It provides no dates for those subsequent steps. Before balance movements resume, all customers will have to reconfirm registration details and set new passwords through the app.
Mercado Bitcoin says customer balance records remain preserved and that it is replenishing affected assets with its own funds. The exchange also warns customers to type its official website address directly into their browser, stating that it does not send links to release balances or ask for passwords outside its platform.
