According to security firm Hypernative, suspicious transfers linked to the hack on Mercado Bitcoin's hot wallets first appeared around 11 PM on November 1, 2026, in Brazil