BitMart Confirms a Hack It Calls Small and Names No Figure

BitMart's founder says the exchange was hacked and will not say how much went. Sheldon Xia confirmed the breach on X on Tuesday, calling the amount involved small and the response quick. No loss estimate has followed. BitMart has been winding down since July and stopped trading in August, so whatever was taken belongs to customers already waiting on a restructuring. How the attacker reached the wallets is unexplained in every account read here.

What the founder said, and what he left out

Only one outlet read at this desk carries Xia's words directly. Quoted by crypto.news on Wednesday morning, he wrote that BitMart "got hacked yesterday too" and that "the amount involved was small, and we acted quickly to investigate and strengthen security". Coinfomania and ChainCatcher paraphrase him and print no figure. The Defiant's story would not load past its summary. So the whole of what is known about the size of this breach is one adjective from the man running the company.

Xia also described the team that answered it as thin.

"Our security team is currently severely understaffed," Xia said.

He added that keeping some key technical staff had taken considerable effort and individual conversations. That is his account of the exchange's condition. Nobody has corroborated it.

The one number anyone has published

Bitquery traced about $391,000 of outflows from wallets it describes as mostly linked to BitMart. crypto.news and The Defiant both print that figure, and both present it as a trace to an address that also received assets from the attack on Mercado Bitcoin. Neither calls it a loss total. That hedge matters, because "mostly" leaves the composition of those wallets open and BitMart has published nothing to set against it.

A suspicion, not a finding

Xia's preliminary investigation points at the group behind the Mercado Bitcoin incident, and no account goes further than that. Bitquery's address overlap sits beside it, as does an X user's observation of transfers from BitMart-associated wallets into an address that took in Mercado's assets. Brazil's largest exchange put its own loss below the on-chain counts on Monday. Nobody has established that the two incidents share an operator. Preliminary is the word every account uses.

The dates do not line up either. crypto.news is alone in giving a sequence: both drains on 2 November, the BitMart transfers starting about 53 minutes before the main Mercado exploit, and Xia's confirmation the following day. ChainCatcher has him confirming an attack the previous day, with the Mercado attack the day before that. Coinfomania says only "yesterday" against a Wednesday stamp. They do not reconcile, and the body here follows crypto.news because it is the only dated account.

A breach inside a liquidation

The timing is what makes this different from an ordinary exchange incident. BitMart said in July it would close the exchange, halted trading in August and later appointed Alvarez and Marsal as financial adviser. Customer withdrawals are unresolved. On crypto.news's single account, a restructuring proposal is to be adjusted this month, with court applications pursued in December or in January 2027, and customers would choose between an upfront distribution and a potentially larger recovery spread over longer. No second outlet read here confirms that timetable.

Its 2021 breach is the only comparison on the record, and crypto.news alone supplies it: about $319.5 million drained that December. Against a figure like that, "small" could mean almost anything. What would settle the scale is a number from BitMart or an explanation of how the wallets were reached, and as of Wednesday morning neither exists.