Tether Froze $4.5M. The Hacker Still Holds $46M. Still No Reopening Date.

JUST IN: the exchange is still offline, the hacker's wallet is still loaded, and there's still no date for when customers get their money back.

Mercado Bitcoin confirmed restoration work is ongoing. It published a set of tracking addresses for the stolen funds. And then it stopped talking. No reopening timetable. No financial amount. Just wallet addresses and a promise that engineers are on it.

Look, that's not a disclosure. That's a holding statement.

The Sequence, In Order

Start with the breach. Attackers pulled funds out of the Brazilian exchange. Then came the freeze: Tether locked $4.5 million of the haul. That's the single most concrete number in this entire story, and it came from the stablecoin issuer, not from the exchange that got robbed.

Here's what the attacker still controls: $46 million. In crypto. Sitting in wallets that are now publicly labeled.

Read those two figures side by side and everything you need to know falls out. Roughly a tenth of the money got frozen. The other ninety percent is loose. The tracking addresses Mercado Bitcoin published are the equivalent of handing detectives a map a week after the getaway car left the garage. Genuinely useful for chain analysts. Useless for anyone trying to figure out whether they'll make rent.

And nobody's putting a number on the total. That's the part I keep circling back to.

How do you audit a hole you won't size? How does a customer decide whether to wait it out or call a lawyer when the company won't publish a figure?

Silence isn't a strategy. It's a delay tactic dressed up as caution.

Who Feels This

Users, first and hardest. A closed exchange is a frozen bank account with worse communication. Every day without a timetable is a day those people can't rebalance, can't exit, can't do a single thing except refresh a status page. That's brutal, and it's entirely self-inflicted on the comms side.

Second: the exchange's own balance sheet. Restoration work sounds reassuring right up until you remember what it usually means. Rebuilding ledgers. Re-deriving balances. Rehashing custody. Sometimes it means reining in a hot wallet setup that was never built for this. None of that's cheap. None of it's fast.

Third, the group nobody mentions: every other venue in Latin America. A hack at one shop gets priced into the whole region. Traders start moving balances offshore. Withdrawal queues at competitors stretch for no reason at all. Institutional desks that were warming up to Brazilian crypto suddenly want a second custodian and a third opinion.

This changes things.

Because the freeze is the headline and most people are missing it. Tether just demonstrated, again, that it can reach into its own ledger and lock funds on command. The attacker holding $46 million is bad news. The fact that $4.5 million of it can be made untouchable by a company in the British Virgin Islands is the actual story.

Stablecoin issuers are the real cops of crypto now. Not regulators. Not the FBI. Tether.

You can love that or hate that. But it's true, and it's not reversing. Every major issuer has a freeze function. Every one has used it. There are startups getting funded right now to build asset-freezing into compliance stacks. The market's verdict: centralized enforcement keeps winning because it's the only thing that moves fast enough to matter.

Which puts exchanges in an awkward spot. They're competing against an issuer with faster reflexes than their own incident response team. That's an uncomfortable comparison and every security lead in the industry knows it.

What to Watch

Three things. You can set alerts on all of them.

Watch the published addresses. Any movement toward a mixer, a cross-chain bridge or a fresh KYC-free swap means the attacker is trying to launder under pressure. Chain analysts will flag it within hours. If there's no movement for days, that's a different signal and a worse one for the exchange. It means whoever's holding the keys is comfortable waiting.

Watch Tether for a second freeze. The $4.5 million came quick. Another round would tell us the issuer is tracking the remaining $46 million wallet by wallet, and that would be the best news depositors get all month.

And watch for the reopening announcement. When it lands, the details matter more than the date. Are withdrawals unlimited on day one? Is there a tiered queue? Is there an insurance backstop, and who's funding it? An exchange that stays quiet on the dollar amount for a week isn't the kind of exchange that suddenly publishes an audited shortfall statement.

Traders are watching closely. So are competitors, who are quietly absorbing customers in the meantime.

My read: a flat reopening with a withdrawal cap is the optimistic case, and the meter is running. The damage from a shortfall in the $50 million range is survivable. The damage from a month of no comment usually isn't. Reputation is the one asset that doesn't come back online when the servers do.

And just like that, the biggest risk in crypto this week isn't the thief holding $46 million. It's the company that won't say how much it lost.