#巴西交易所遭4600万美元盗币 In this Brazilian exchange hack, attackers transferred about $46 million through regular transactions. After the platform suspended deposits and withdrawals, related addresses still showed fund activity; a stablecoin issuer froze about $6.2 million. Customer assets have not suffered any losses so far.

Three things—which is most critical?
· Pre-incident risk controls: determine whether an attack can be detected and stopped in time.
· Asset segregation: determines whether the platform will misappropriate user funds and whether liabilities can be clearly accounted for after an incident.
· Freezing, tracking, and compensation: determine whether losses can be contained and shortfalls made up afterward.
None of the three can be missing without undermining trust. If choosing just one, asset segregation is the most fundamental. Risk controls may fail, but when customer assets are held separately, the platform’s own funds can be lost while users’ claims remain clear. The core lesson from FTX’s collapse was precisely that customer assets and company funds had been commingled.
Trust is restored through “verifiability”
Statements can only calm sentiment in the short term; genuinely rebuilding trust requires a steady stream of evidence:
· First, protect users’ rights to their assets: reconcile customer liabilities, wallet balances, and funds in transit for each token, and clarify who bears the losses.
· Make reserves verifiable: publish proof of reserves and undergo an independent audit. Ideally, on-chain assets, customer liabilities, and top-up records should all reconcile.
· Ensure security fixes withstand re-examination: explain how the attack vector and signing permissions were compromised, and have an external organization verify the fixes.
· Deliver compensation and withdrawals as planned: resume deposits and withdrawals in stages, while publicly reporting the amount recovered, compensation progress, and remaining shortfall.
· Keep disclosing key data: distinguish confirmed facts, investigation progress, and commitments, and maintain a regular update schedule.
Mercado Bitcoin has suspended deposits and withdrawals and said customer assets were unaffected. The market will focus on what happens next: when withdrawals and deposits resume, whether updated proof of reserves can be provided, and how much of the stolen funds is ultimately recovered.

Pre-incident risk controls determine whether money is lost, asset segregation determines whether the books become muddled, and post-incident response determines whether trust can return; asset segregation is the foundation of the entire system.