Mercado Bitcoin officially announced the containment of the security breach at 9:56 a.m. (Brazil time) on November 2. However, forensic analysis by Bitquery shows that 36,042 Ethereum deposit addresses were emptied between 9:27 a.m. and 1:56 p.m., proving that unauthorized fund transfers persisted well after the exchange's public declaration.