BitMart Reports Security Breach, Links Hack to Mercado Bitcoin Incident

BitMart Security Breach Announcement

BitMart, a cryptocurrency exchange, announced on November 2 that it had experienced a security breach, linking it to a similar incident involving Brazil's Mercado Bitcoin. On November 3, the exchange's founder, Sheldon Xia, took to social media platform X to confirm the hack, stating that preliminary investigations indicate that the same group responsible for targeting Mercado Bitcoin may have also compromised BitMart. Xia noted that the stolen amount was minimal and emphasized that the exchange acted swiftly to address the situation and bolster its security protocols.

Challenges Faced by BitMart

The latest breach comes at a precarious time for BitMart, which has been undergoing significant restructuring since suspending trading activities in August. The exchange is grappling with unresolved customer withdrawals and financial constraints, which have heightened pressure on its operations. Xia mentioned that the company has had to trim its workforce to a core team amid ongoing threats and disputes arising from disgruntled former employees. This situation has made it challenging to retain technical staff vital for maintaining operations.

Investigative Findings

Investigative analysis from blockchain firm Bitquery revealed that approximately $391,000 in funds was withdrawn from wallets tied to BitMart just before the larger hack on Mercado Bitcoin. The suspicious transactions started approximately 53 minutes before the Mercado Bitcoin attack, suggesting a coordinated approach by the attackers.

An unnamed user on X also pointed out the transfer of assets from BitMart wallets to an address linked to the Brazilian exchange’s breach. The activity included multiple cryptocurrencies and suggested a common thread in the two incidents. Despite these observations, BitMart has not provided its own loss estimates or disclosed how the breach occurred.

Impact of Restructuring

Xia further explained that the aftermath of the July restructuring has hindered the exchange's capacity to respond effectively to security threats. He specifically pointed fingers at Elly, the former marketing head, for purportedly retaliating against the company. Xia expressed that it was difficult to retain technical talent due to the threats and unrest surrounding the company's image.

Historical Context and Future Plans

In a broader context, BitMart's struggles can be traced back to a major security incident in December 2021 that resulted in significant asset losses, estimated to be around $319.5 million. The firm has since attempted to navigate its financial woes by engaging Alvarez & Marsal to assist in reviewing its operations. Customers are now being given options for distributions or recovery over an extended period, which is part of their restructuring plan set for adjustment in November and potential court applications by the end of 2026 or early 2027.

Mercado Bitcoin's Response

Meanwhile, Mercado Bitcoin has revealed additional details on its security breach from earlier on November 2, which compromised wallets across numerous blockchain networks. The Brazilian exchange temporarily halted deposits and withdrawals upon discovering the attack. Initial reports suggested that around $38 million was at stake, with estimates from blockchain firm Chainalysis indicating that nearly $49 million may have been stolen. The exchange has stated that it will ensure customers will not incur losses from this incident and is actively working with law enforcement and partners to track the stolen assets. They published wallets tied to the fraudulent transactions to aid in this recovery effort.