BitMart flags security staffing strain after new hack amid restructuring

Traders Union
All News
Crypto
BitMart security hack update

Highlights

BitMart founder Sheldon Xia revealed the security team is 'severely understaffed' after restructuring, impacting response to a new hack involving about $391,000.
Blockchain analysis suggests BitMart's hack may be linked to the over $46 million Mercado Bitcoin breach, further escalating industry security concerns.
BitMart outlines three possible user recovery paths amid restructuring, while the crypto-focused T3 Financial Crime Unit has dissolved after difficulties in coordination and response.

Hack details and staffing pressure

As reported by Cointelegraph, BitMart founder Sheldon Xia said on Wednesday that the exchange's security team is "severely understaffed" after restructuring complicated staff retention and followed threats against employees. In a post on X, Xia said the company had to persuade key technical staff to stay and maintain core systems while it continues to face repeated attacks.

Xia described the amount involved in Monday's hack as small, without giving a figure. Blockchain analytics firm Bitquery said in a Wednesday investigation that it identified about $391,000 in suspicious transfers from wallets mostly associated with BitMart across three blockchains.

Bitquery traced the funds to a wallet also implicated in the more than $46 million hack of Brazil's Mercado Bitcoin on Monday, Nov. 2. That supports Xia's preliminary view that the two incidents may be connected.

Restructuring outlook and wider industry risks

BitMart's latest breach comes during months of uncertainty over its future. The exchange said in July that it would end trading on Aug. 26 and cease operations in January 2027, and users later reported delayed withdrawals and frozen accounts that raised concerns about access to funds.

In August, BitMart's Chinese-language X account alleged that employees had gone unpaid and asked for answers about customer funds. Xia dismissed those claims as fabricated, although it remained unclear at the time who controlled the account.

In a restructuring proposal published on Monday, the exchange set out three possible recovery paths for users, including liquid asset distributions and recovery-linked tokens. The company plans to seek court approval in December or January.

Separately, Bloomberg reported on Wednesday that the T3 Financial Crime Unit, a crypto crime-fighting alliance formed by Tron, Tether and TRM Labs and later joined by Binance, has dissolved. The group had struggled with slow responses and poor coordination, according to people familiar with the matter, even after saying in May that it had helped freeze more than $450 million in assets linked to suspected criminal activity since its 2024 launch.

The breakup comes as the crypto sector faces a wave of major hacks, including last week's $6.3 billion Binance breach, described in the report as the largest cryptocurrency theft on record. That backdrop adds to pressure on exchanges already managing security gaps, customer recovery plans and tighter scrutiny of operational resilience.

In our earlier article on Q3 cybersecurity funding, we noted that global cybersecurity and privacy startups raised $6.8 billion as investors backed fewer but much larger late-stage rounds. We also highlighted how AI-focused and identity security firms dominated fundraising, alongside accelerating consolidation through major acquisitions—underscoring the market’s focus on defending against evolving threats.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.