BitMart founder says security team severely understaffed after new hack
BitMart confirms new hack as founder warns on staffing
Crypto exchange BitMart has confirmed a new hack. Its founder, Sheldon Xia, said the security team is severely understaffed after restructuring.
BitMart is a platform where people buy and sell cryptocurrency. Xia said threats against employees and alleged retaliation by former staff made it harder to keep technical staff.
Blockchain analytics firm Bitquery said it found about $391,000 in suspicious transfers from wallets mostly linked to BitMart. A wallet is a tool used to hold digital assets.
Three points from the reports
- Xia said the amount involved in Monday's hack was small, but he did not give a figure.
- Bitquery identified about $391,000 in suspicious transfers across three blockchains. A blockchain is a shared record system for transactions.
- Bitquery traced the funds to a wallet also linked to the more than $46 million hack at Brazil's Mercado Bitcoin on Monday, Nov. 2.
What founder Sheldon Xia said
In a post on X on Wednesday, Xia said: "It took considerable effort and individual conversations to persuade some key technical staff to remain and maintain our core systems."
He added: "Our security team is currently severely understaffed, but we are still doing everything we can to safeguard data and assets."
What analytics firm Bitquery found
Bitquery said its Wednesday investigation found about $391,000 in suspicious transfers from wallets mostly associated with BitMart across three blockchains.
The firm traced the funds to a wallet also implicated in the more than $46 million Mercado Bitcoin hack on Nov. 2. The source presents this as support for Xia's preliminary suspicion of a possible connection between the two incidents.
What is confirmed
BitMart confirmed a new hack, and Xia is the source for the claim that the security team is severely understaffed. Bitquery reported the $391,000 figure and the wallet link to the Mercado Bitcoin hack.
BitMart had announced in July that it would end trading on Aug. 26 and cease operations in January 2027. The exchange published a restructuring proposal on Monday with three potential recovery options for users, including liquid asset distributions and recovery-linked tokens.
What is still unclear
The exact amount involved in the BitMart hack was not disclosed by Xia. The connection to the Mercado Bitcoin hack is described as a preliminary suspicion supported by the wallet trace, not as a fully confirmed finding in the source.
After the July announcement, users reported delayed withdrawals and frozen accounts. In August, BitMart's Chinese-language X account alleged employees had gone unpaid and demanded answers about customer funds. Xia dismissed those allegations as fabricated, and the source says it remained unclear who controlled the account at the time.
Cointelegraph said it contacted BitMart for details on the restructuring, security staffing and latest breach and had not received a response by publication.
Why this matters for users
The staffing comment comes during a period of uncertainty over BitMart's future and after reported problems with withdrawals and account access. The source does not give a confirmed total for user losses from the latest hack.
Crypto crime-fighting alliance disbands, Bloomberg reported
Separately, Bloomberg reported Wednesday that the T3 Financial Crime Unit, formed by Tron, Tether and TRM Labs and later joined by Binance, had dissolved. Bloomberg cited people familiar with the matter and reported that one source said the group disbanded in late August.
Bloomberg reported the group struggled with slow responses and poor coordination. In May, T3 said it had helped freeze more than $450 million in assets linked to suspected criminal activity since its launch in September 2024.
What happens next
BitMart said it plans to seek court approval for its restructuring proposal in December or January. The exchange had already announced it would cease operations in January 2027.
Sources
Newisty Editorial Team covers technology, cryptocurrency, digital products, online platforms, developer tools and the wider digital economy. Our content is researched from official sources, company announcements, public documentation, market data and other primary or reputable sources. Articles are reviewed and edited before publication for clarity, accuracy and useful context.
