hack or exploit

BitMart reports minor hack as wind-down and restructuring drag on

60Importance
updatingStatus
4News media
4Pieces
Published
Updated
Since then
2 new reports
Also mentions
BTC

BitMart confirmed a security breach on November 2 while its restructuring was still underway, and the exchange’s founder linked the incident to the same group suspected in the Mercado Bitcoin attack. One report said Bitquery traced about $391,000 in outflows from BitMart-linked wallets to an address tied to that earlier exploit.

Key claims & sources

✓
One report described the incident as a minor hack while BitMart’s wind-down and restructuring were still continuing.
✓
The incident was framed as a security issue that could affect user trust and repayment plans during the restructuring process.
✓
Bitquery traced about $391,000 in outflows, mostly from BitMart-linked wallets, to an address used in the Mercado Bitcoin attack.
✓
BitMart confirmed on November 3 that it suffered a security breach on November 2 while the exchange was still in restructuring.
✓
BitMart’s founder said the exchange’s preliminary investigation pointed to the same group behind the recent Mercado Bitcoin attack.

What it means

BitMart built its reputation on cheap listings and fast onboarding before a 2021 breach drained tens of millions in assets, an episode that still colors how the exchange is perceived. By 2025 it was mid-restructuring, trying to settle creditor claims from that period, when a second breach hit on November 2 — the same day Brazil's largest exchange, Mercado Bitcoin, lost $48.6 million to an exploit, a coincidence founder Sheldon Xia says is not coincidental.

While restructuring is unresolved, any new loss complicates calculations for who gets repaid first and how much remains to be distributed. Users still waiting on prior claims now face a fresh unknown on the balance sheet, and BitMart's management must explain to creditors whether the roughly $391,000 traced in outflows will be absorbed by the exchange or passed through to affected accounts. Counterparties and partners weighing custody of funds with BitMart gain one more reason for caution.

Tracing about $391,000 in stolen funds to the same address used in the Mercado Bitcoin attack is not proof, but it raises a question worth asking openly: are exchanges under restructuring or wind-down treated as soft targets, with weaker monitoring at the exact moment attackers expect it. If one group can hit two platforms on the same day, it argues for shared threat intelligence among exchanges rather than each firm handling disclosure and defense alone.

BitMart's preliminary investigation, confirmed in its November 3 statement, has not yet named the attackers or quantified total losses beyond the traced $391,000. The next marker to watch is whether that investigation produces a formal on-chain attribution matching the Mercado Bitcoin case, and whether BitMart's restructuring plan is revised to account for the new breach before creditors vote on final repayment terms and timelines.

Market reaction i

BitMartBMX it is the asset of the company or protocol in the event
first headline
— 2 h before
0.0% 4 h after
$0.0588price at publication
4data points

Coverage timeline

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Nov 4 04:56
+0 min
Nov 4 04:56
The Defiant context
Its angle: defiant, address, traced
+50 min
Nov 4 05:46
crypto.news context
Its angle: cryptocurrency, investigation, responsible
+1 h 51 m
Nov 4 06:47
CR Cryptopolitan adds
Adds $48.6M, with quotes

Other recent incidents

WhenWhat happenedFigure
2 days ago Mercado Bitcoin incident $49M
2 days ago Solana MEV Bot King incident $786k
2 days ago Mercado Bitcoin · Unknown incident $40M
3 days ago Premia V3 · Withdrawal Logic Flaw incident $437k
3 days ago BTCPay Server · Key Leaked via Infrastructure incident no figure in dollars

4272 incidents stored