Brazilian cryptocurrency users are facing significant hurdles this week as Nubank and Mercado Pago both suspended deposits and withdrawals of digital assets. While customers can still trade cryptocurrencies internally for local currency, they are currently blocked from moving their holdings to external wallets. Both companies pointed toward failures at unnamed external verification providers as the cause of the disruption, suggesting the issue lies outside their own internal infrastructures.
The timing of these outages has raised eyebrows across the industry, coming shortly after blockchain analytics giant Chainalysis admitted to a massive security breach. The firm revealed that a malicious actor gained access to credentials for every single user on its platform, leading Chainalysis to take several key monitoring and screening tools offline. Given that reports indicate Nubank utilizes Chainalysis technology specifically to vet transfers and block illicit activity, observers see a likely connection between the two events, though neither company has officially confirmed a link.
This instability arrives during a particularly volatile period for the Brazilian crypto market. Just days prior, Mercado Bitcoin, one of the region’s largest exchanges, was forced to halt operations following its own separate security incident earlier in November. Although that exchange planned a limited reopening for balance checks over the weekend, full trading and withdrawal capabilities remained frozen without a clear date for restoration.
Despite the chaos surrounding transfers, Nubank has reassured its clients that their personal information and stored assets remain secure. For now, those holding bitcoin or ether within the app must wait for the mysterious third party to resolve its technical failures before they can regain control over their outbound transactions. As some of Latin America’s biggest financial players struggle with vendor vulnerabilities, the situation highlights just how dependent modern fintech is on a small handful of critical backend infrastructure providers.
