Security team 'critically short-staffed,' BitMart founder reveals following fresh cyber attack

Security team 'critically short-staffed,' BitMart founder reveals following fresh cyber attack

BitMart's founder disclosed critical security personnel shortages during company reorganization while blockchain analysts identified questionable fund movements possibly connected to the Mercado Bitcoin breach.

Following a recent company reorganization, cryptocurrency trading platform BitMart is currently functioning with insufficient security personnel, according to its founder's Wednesday statement, which came after acknowledging a fresh cyber breach potentially connected to the recent compromise of Brazilian platform Mercado Bitcoin.

BitMart's founder Sheldon Xia revealed in an X platform posting that employee intimidation and purported revenge actions by ex-employees had created challenges in keeping technical staff members on board.

It took considerable effort and individual conversations to persuade some key technical staff to remain and maintain our core systems. However, we continue to face numerous attacks. Our security team is currently severely understaffed, but we are still doing everything we can to safeguard data and assets.

Sheldon Xia, BitMart founder

While Xia characterized the sum compromised in Monday's security breach as minimal, he refrained from providing specific dollar amounts. Blockchain intelligence company Bitquery discovered roughly $391,000 in questionable fund movements from cryptocurrency wallets predominantly linked to BitMart spanning three separate blockchain networks, based on their Wednesday analysis.

Sheldon Xia statement
Source: Sheldon Xia

Bitquery's investigation followed the money trail to a cryptocurrency wallet that was also connected to the substantial $46 million-plus Mercado Bitcoin security compromise that occurred on Monday, Nov. 2, lending credence to Xia's initial theory regarding a potential link between both security incidents.

BitMart weighs restructuring after shutdown announcement

This most recent security compromise arrives during several months of ambiguity surrounding BitMart's operational future. The trading platform made a July announcement stating it would discontinue trading activities on Aug. 26 and completely shut down operations by January 2027. After this announcement went public, platform users began reporting postponed withdrawal requests and locked accounts, sparking worries about their ability to retrieve their cryptocurrency holdings.

During August, BitMart's Mandarin-language X account made claims that staff members had not received compensation and called for transparency regarding customer asset management. The company's founder rejected these claims as false fabrications, although uncertainty remained about which party had administrative control over that particular account during that period.

Within a reorganization plan made public on Monday, the trading platform presented three possible recovery pathways for platform users, featuring liquid asset allocation options and tokens connected to recovery efforts, with intentions to pursue judicial authorization during December or January.

Cointelegraph reached out to BitMart requesting information regarding the reorganization plan, security workforce levels and the most recent security breach but did not obtain any reply before going to press.

Crypto crime-fighting alliance disbands amid wave of hacks

In related developments, a cryptocurrency criminal activity prevention coalition established by Tron, Tether and TRM Labs has broken up during a surge of significant industry security breaches, Bloomberg disclosed on Wednesday.

The T3 Financial Crime Unit, which began operations in September 2024 and subsequently welcomed Binance as a member, experienced difficulties with delayed reaction times and inadequate collaborative coordination, Bloomberg's reporting indicated, referencing individuals with knowledge of the situation. An anonymous source revealed the coalition dissolved during the final weeks of August.

During May, T3 announced it had successfully assisted in freezing assets exceeding $450 million that were connected to suspected illegal operations since the group's formation in 2024.

The coalition's breakup occurs during a succession of significant cryptocurrency platform security breaches, including the previous week's $6.3 billion Binance security compromise, which represents the most substantial cryptocurrency theft in documented history.

← Back to Blog