BREAKING
BitMart Operating With Severely Depleted Security Team Amid Fresh Breach Linked to Mercado Bitcoin Incident ● Mercado Bitcoin to Restore Customer Account Access Following Major $46M Security Breach ● From Sci-Fi Dystopia to Onchain Collateral: How Smart Locks Could Bridge Real-World Assets and Decentralized Finance ● Bitcoin Developers Eye 'Great Consensus Cleanup' to Fix Years-Old Protocol Flaws ● Ethereum Activates Fusaka Upgrade as Markets Flash Risk-On and Crypto Outperforms Traditional Equities ● Why Crypto Feels Stagnant: The Case for a Market Wildfire to Clear Out "Zombie" Protocols ● New York Healthcare Tech Firm Cognitive Health Technologies Discloses Data Breach Impacting Nearly 50,000 Individuals ● Markets Claw Back Losses as Private Employment Slumps; Monad Faces Retention Test Post-TGE ●
Crypto Security & Scams

BitMart Operating With Severely Depleted Security Team Amid Fresh Breach Linked to Mercado Bitcoin Incident

Photo: Documentation / News Illustration

Cryptocurrency exchange BitMart is currently operating with a critically understaffed security team following a period of internal restructuring, according to statements made Wednesday by the platform’s founder, Sheldon Xia. The confirmation of these staffing vulnerabilities arrives alongside news of a fresh security breach impacting the exchange, an incident that blockchain analytics firms suspect is directly linked to the massive cyberattack that recently struck prominent Brazilian digital asset platform Mercado Bitcoin.

Writing in a public post on the social media platform X, BitMart founder Sheldon Xia detailed the immense administrative and logistical challenges the company has faced in trying to maintain technical oversight. Xia explained that a combination of external threats directed at employees and alleged retaliatory measures orchestrated by disgruntled former staff members significantly complicated management’s efforts to retain essential technical personnel during the corporate overhaul.

"It took considerable effort and individual conversations to persuade some key technical staff to remain and maintain our core systems," Xia wrote in his public statement. "However, we continue to face numerous attacks. Our security team is currently severely understaffed, but we are still doing everything we can to safeguard data and assets."

While Xia characterized the financial impact of Monday’s security breach as relatively small, he deliberately refrained from disclosing a specific dollar figure for the losses incurred. However, independent blockchain analytics firm Bitquery conducted an intensive investigation into the matter, publishing their findings on Wednesday. According to Bitquery’s assessment, analysts identified approximately $391,000 in suspicious, unauthorized transfers originating from digital wallets predominantly associated with BitMart operations across three distinct blockchain networks.

Further analysis by Bitquery revealed that the stolen funds were ultimately funneled to a destination wallet that had also been heavily implicated in the devastating, multi-million-dollar attack on Mercado Bitcoin, which occurred on Monday, Nov. 2, resulting in losses exceeding $46 million. This forensic discovery strongly reinforces Xia’s preliminary suspicions regarding a coordinated cross-platform attack vector, suggesting that the same malicious actors or sophisticated hacking groups may be systematically targeting multiple exchanges in rapid succession.

The latest breach compounds an already precarious situation for BitMart, which has been grappling with months of profound uncertainty regarding its long-term corporate viability and operational future. The troubles began in earnest when the exchange announced back in July that it would completely wind down trading operations by Aug. 26 and shutter the platform entirely by January 2027. Following this abrupt cessation announcement, platform users flooded community forums and support channels with complaints regarding severely delayed withdrawal requests and arbitrarily frozen accounts, sparking widespread panic and intense scrutiny over whether customers would ever regain full access to their deposited digital assets.

BitMart founder says security team ‘severely understaffed’ after new hack

Tensions reached a boiling point in August when BitMart’s official Chinese-language account on X published explosive allegations claiming that internal employees had gone entirely unpaid for extended periods and publicly demanded transparency regarding the management of customer funds. At the time, the platform’s founder dismissed these alarming claims as completely fabricated fabrications, though confusion reigned across the broader cryptocurrency community as independent observers questioned who actually maintained administrative control over the exchange’s official social media channels during the dispute.

In an effort to chart a path forward and quell mounting user outrage, BitMart published a formal restructuring proposal on Monday. The detailed document outlined three potential recovery paths for affected users, including options for liquid asset distributions and the introduction of recovery-linked digital tokens. The exchange indicated that it intends to present these formal plans for official court approval sometime between December and January. When contacted for comment by industry reporters seeking further clarification regarding the broader restructuring strategy, the current status of security staffing, and the specifics of the latest breach, representatives for BitMart failed to provide a response by the time of publication.

BitMart’s internal struggles with security personnel and corporate governance arrive during a particularly volatile period for the broader digital asset sector, which has been rattled by an unprecedented wave of high-profile security incidents and platform compromises. Compounding these industry-wide vulnerabilities, a specialized crypto crime-fighting alliance established jointly by major sector players Tron, Tether, and blockchain intelligence firm TRM Labs has officially dissolved amidst the mounting onslaught of major hacks, according to a report published Wednesday by Bloomberg.

The specialized multi-agency initiative, known as the T3 Financial Crime Unit, was originally launched in September 2024 with the stated goal of tracking, intercepting, and freezing illicit funds moving across public blockchains. The coalition was later joined by major exchange Binance as part of an expanding public-private partnership to combat systemic crypto crime. However, according to individuals familiar with the matter who spoke to Bloomberg on condition of anonymity, the unit frequently struggled with sluggish operational responses, internal friction, and inadequate cross-institutional coordination when responding to fast-moving exploits. One source confirmed that the collaborative coalition formally disbanded in late August.

Despite its ultimate dissolution, the T3 Financial Crime Unit had previously claimed significant enforcement successes during its operational lifespan. In May, the group reported that it had successfully assisted law enforcement and partner platforms in freezing more than $450 million in digital assets linked directly to suspected criminal activities and sophisticated laundering rings since its inception in 2024.

The disintegration of the T3 crime-fighting unit coincides with a brutal stretch for digital asset security, highlighted most prominently by last week’s staggering $6.3 billion security breach suffered by Binance—an incident that now stands as the largest single cryptocurrency theft recorded in the history of the industry. As exchanges like BitMart continue to grapple with internal restructuring, talent retention crises, and lean security infrastructures, the broader digital asset ecosystem faces mounting pressure to overhaul its collective defense mechanisms against increasingly sophisticated threat actors.

What is your reaction to this story?

Azzam Bilal Chamdy

Writer and contributor at Bitcoin 98.

Comments (0)