BitMart Hacked Again as Trail Points to Mercado Bitcoin
- Published
- Updated
- Since then
- 2 new reports
- In
- Exchanges
BitMart founder Sheldon Xia confirmed the exchange was hacked a day before his public statement, and on-chain tracing linked BitMart-related funds to addresses associated with the Mercado Bitcoin exploit. The reports also say investigators have not confirmed a shared infrastructure provider or attack method.
Key claims & sources
What it means
BitMart is a crypto exchange, and Sheldon Xia’s confirmation places the incident alongside other exchange-security events that have kept trading platforms under scrutiny. The Mercado Bitcoin name in the same set of reports points to a separate exploit that investigators are now comparing with the BitMart case. Together, the two stories frame another reminder that exchange wallets and related addresses remain a live target for attackers.
For people who trade or custody assets on centralized venues, the immediate issue is that balances and linked addresses can become part of an active theft trail once funds start moving. If investigators can connect wallets across BitMart and Mercado Bitcoin, exchanges may face faster pressure to freeze, monitor, or publicize suspicious flows. Builders and operators also have to assume that incident response now includes tracing activity across multiple platforms, not only the venue that first disclosed the breach.
The wider stakes reach beyond two exchanges because repeated breaches erode confidence in the plumbing that supports crypto markets. The mention of Binance, a French bank, and payment processors in the same week shows how security problems can span trading venues and traditional financial rails at the same time. That leaves the industry balancing openness and speed against a basic need for tighter controls, better monitoring, and cleaner separation between platforms and their infrastructure.
Still unresolved are the links between BitMart and Mercado Bitcoin, including whether the wallet overlap reflects one actor, one toolset, or simply similar laundering paths. The reports also leave open whether a shared infrastructure provider was involved, or whether the two incidents share any attack method at all. Confirmation from the exchanges or from investigators’ next on-chain updates would be needed to settle those questions.
Market reaction i
Coverage timeline
Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.
Other recent incidents
| When | What happened | Figure |
|---|---|---|
| 1 days ago | Loopscale Lending · Unknown incident | no figure in dollars |
| 1 days ago | TENDRIL · Swap Logic Flaw incident | $550k |
| 1 days ago | $TENDRIL · Smart contract vulnerability incident | $555k |
| 3 days ago | InsurancePool/CoreVault · Flash loan attack incident | $112.3k |
| 4 days ago | Solana MEV Bot King · Hot wallet key compromise incident | $856k |
4280 incidents stored