BitMart confirms hack: about $391k drained from BitMart-linked wallets on Base, Arbitrum and Optimism

Summary

BitMart founder Sheldon Xia confirmed on X on 3 November 2026 that the exchange "got hacked yesterday too", describing the amount as small and saying BitMart acted quickly to investigate and strengthen security. Bitquery reports that the same attacker behind the Mercado Bitcoin drain took about $391k from wallets tied to BitMart on Base, Arbitrum and Optimism, starting 53 minutes before the Mercado Bitcoin outflows and returning about 19 hours later. BitMart is in court-supervised restructuring after winding down trading in 2026.

Affected

• BitMart (centralized exchange) wallets on Base, Arbitrum and Optimism, per Bitquery's address labels. BitMart has not confirmed that these wallets are its own.
• No fix applicable; BitMart says it has strengthened security.

Impact

Bitquery estimates about $391k left BitMart-linked wallets and went to the Mercado Bitcoin hacker's main address, which is the same on every EVM chain. Bitquery says Circle froze 66,283 USDC on Base at a second hacker address funded from the BitMart-linked Base wallet. The loss figure is Bitquery's estimate, not one confirmed by BitMart. The initial access method has not been disclosed, and BitMart has not said whether user balances were affected. Bitquery cautions that the link to Mercado Bitcoin rests on on-chain behaviour and address labels.

Recommended actions

• Exchanges, bridges, OTC desks and stablecoin issuers: screen and flag deposits from the attacker address listed in the indicators, on all EVM chains.
• BitMart users: follow only official BitMart and restructuring-administrator channels, and beware of phishing that exploits the incident.

Source & attribution

This 0xCERT advisory summarises a statement by BitMart founder Sheldon Xia (https://x.com/sheldonbitmart/status/2117650361154691529) and on-chain analysis by Bitquery (https://bitquery.io/investigations/mercado-bitcoin-hack, https://x.com/Bitquery_io/status/2117668767832678439). The indicator is copied verbatim from Bitquery's report. Details may change; refer to the original sources for the authoritative record.