Key Highlights
- Major Brazilian financial platforms preemptively suspended cryptocurrency withdrawals following an incident at a third-party risk monitoring and anti-money laundering vendor.
- Nubank confirmed that internal infrastructure was unaffected, keeping buying and selling active while reassuring users that customer assets and sensitive data remain secure.
- The disruption follows recent high-profile crypto security incidents, including a major exploit affecting Mercado Bitcoin and persistent sector-wide vigilance.
Third-Party Provider Disruption Halts Crypto Withdrawals
Major platforms operating in Brazil’s digital asset sector have enacted precautionary measures affecting cryptocurrency transfer operations following an operational disturbance at an external compliance vendor. In an official disclosure, one affected platform revealed that it identified instability in crypto asset transfer operations, resulting from an incident suffered by a risk monitoring and money laundering prevention provider,
prompting a preemptive halt to customer withdrawals. While transfer capabilities were paused, internal operations such as the buying and selling of digital currencies remained functional. The platform added, We are following the situation in real time and will inform users as soon as operations are normalized.
Digital banking giant Nubank took corresponding defensive steps, similarly attributing the withdrawal constraints to operational instability originating at an external data partner. Addressing consumer concerns, the neobank stated firmly that the external disruption did not reach or compromise its proprietary systems. Emphasizing data integrity and the safety of client holdings, Nubank confirmed, All assets and information remain protected. The other crypto products continue to function normally.
Market Speculation Surrounds Custody Providers
The abrupt freeze on transfer rails ignited widespread speculation across social media platforms, with industry observers questioning whether infrastructure firm Paxos—which handles digital asset custody for both enterprises—had experienced a security compromise. However, Paxos did not issue any formal communications indicating that it had been targeted or breached by threat actors. Furthermore, the company’s official status page displayed no operational incidents or degradation registered on November 6.
The precautionary suspensions occurred during a period of heightened sensitivity across the global and regional digital asset ecosystems. Just last month, prominent exchange Binance faced an attack in which threat actors siphoned over $6 billion in cryptocurrency from a hot wallet, elevating alert levels across institutional market participants.
Why This Matters
The suspension underscores the interconnected risks facing modern fintech and crypto platforms that rely heavily on third-party security, compliance, and transaction-monitoring vendors. Even when core proprietary infrastructure remains intact, service disruptions at specialized anti-money laundering (AML) and risk analysis providers can paralyze on-chain transaction flows.
This incident also compounds anxieties within the Brazilian cryptocurrency landscape following a direct security breach at Mercado Bitcoin. Brazil’s largest digital asset exchange suffered an attack on Monday resulting in the loss of more than $46 million in digital assets. While Mercado Bitcoin kept customer withdrawals suspended, the exchange pledged to fully compensate impacted users rather than socializing the losses, highlighting ongoing operational and security pressures across regional exchanges.
Frequently Asked Questions
Were customer funds compromised during the withdrawal suspension?
No. According to statements from the affected platforms, customer funds and personal information remain secure. Nubank explicitly confirmed that its internal infrastructure was untouched, stating that All assets and information remain protected.
Can users still trade cryptocurrencies on the affected platforms?
Yes. The restrictions were applied preemptively to on-chain crypto withdrawals and transfers. Core platform features, including the purchase and sale of digital assets, continue to function normally.
Was Paxos confirmed to be the target of an attack?
No. Despite circulating rumors regarding Paxos due to its custodial partnerships with the platforms, the infrastructure provider published no reports indicating an attack, and its system status monitors reported no incidents on November 6.
