🚨 Brazil’s leading exchange, Mercado Bitcoin, just claimed “the incident is under control and customers suffered zero losses.” Ten minutes after issuing the statement, the hacker’s address moved again. At 20:56, the official statement was released, halting deposits and withdrawals. The Ethereum attack address flagged by Hypernative received another 314 $ETH via a cross-chain bridge between 21:06 and 21:12, then transferred 200 ETH to a new address at 21:20, and by 21:34–21:43, swept away all remaining funds: 183,000 USDe, 51,000 USDS, 39,000 RLUSD, and 369 PAXG. But the bulk of the funds haven’t moved yet: 106.07 BTC sit untouched in the Bitcoin address; 2,800 + 200 ETH remain frozen in two newly created addresses with no outgoing transactions, and the main address still holds 405.8 ETH; the TRON address still holds 708,000 USDT since 14:27. Combined, these frozen assets total approximately $16.75 million—less than half of the $40 million alert threshold. Two exchanges compromised in one week, both ending with the same line: “users are unaffected”—translated, that means the platform is covering losses itself. It’s good they can absorb the hit, but it also reveals that hot wallets routinely hold far more funds than most realize. “Under control”—does that mean the hackers are contained, or just that deposit and withdrawal buttons have been turned off?