BitMart has confirmed another crypto hack, and the timing lands right as Brazilian exchange Mercado Bitcoin is still cleaning up from its own breach. Founder Sheldon Xia said the November 2 incident was relatively small, yet on-chain researchers traced roughly $391,000 from wallets linked to BitMart to the same attacker cluster tied to Mercado Bitcoin.
That second exchange has estimated about $38 million was involved, with around $11 million already frozen through industry partners. For Bitcoin investors, the most interesting development is not another exchange headline. It is the reminder that self-custody remains Bitcoin’s strongest security feature.
The bigger question now is whether these back-to-back breaches push more holders toward holding BTC in wallets they control, rather than leaving keys with platforms under operational stress.
What Happened in the Latest Crypto Hack?
Xia confirmed the breach in a November 3 statement on X after suspicious transfers appeared on-chain.
“Yes, we got hacked yesterday too,” he said, adding that BitMart investigated quickly and tightened security.
Bitquery’s analysis pointed to about $391,000 drained from wallets mostly linked to BitMart, starting roughly 53 minutes before the larger Mercado Bitcoin exploit.
Researchers then traced those flows to attacker-controlled addresses already connected to the Brazilian incident.
BitMart has not published its own loss figure or a full technical root-cause report.
We believe the confirmed overlap in destination wallets is the detail that matters most for market structure.
It suggests opportunistic attackers are scanning multiple exchanges, not just one soft target.
Why Mercado Bitcoin’s Freezes Matter Too
Mercado Bitcoin temporarily paused deposits and withdrawals after spotting the incident across several networks.
The exchange later said roughly $38 million in assets were involved and that about $11 million had been blocked with help from partners.
Separately, Chainalysis put the stolen total near $49 million and said nearly $10 million was frozen after coordination with the exchange, law enforcement and industry participants.
Mercado Bitcoin has said customers will not bear the financial losses.
That recovery work is constructive, and it shows how tracking tools can still claw back funds when responders move fast.
Even so, frozen funds after the fact are a second-best outcome compared with never losing control of the keys.
BitMart’s Staffing Strain Raises Hard Questions
Xia linked part of the security pressure to staff departures after BitMart’s restructuring.
He said the firm has kept only a core team, while threats and disputes with former personnel made it harder to retain technical talent.
“Our security team is currently severely understaffed,” Xia acknowledged, while arguing remaining staff are still working to protect customer data and assets.
BitMart halted trading in August and appointed Alvarez & Marsal as financial adviser to review assets, liabilities and withdrawal options.
Management has also pointed back to a December 2021 breach that depleted about $319.5 million in reserves, including $51.5 million in Bitcoin, $164.1 million in Ethereum and $96.5 million in BNB.
We would look for clearer proof that exchanges under wind-down stress can still fund robust security before asking users to leave large balances on-platform.
BitMart expects to refine its restructuring proposal during November before pursuing court applications in December 2026 or January 2027.
Customers have been offered paths that trade faster distributions against potentially higher recoveries over a longer timeline.
That process may help some users, but it also underscores the difference between an IOU on an exchange and Bitcoin sitting in a wallet you control.
What Does This Mean for Bitcoin Self-Custody?
Exchange failures and hacks do not weaken Bitcoin’s design. They highlight why its self-custody model exists.
When users hold BTC in their own wallets, an exchange’s staffing crisis or hot-wallet compromise cannot seize those coins.
That is the resilience edge Bitcoin was built for.
As we covered when ZachXBT flagged a $133 million bank-linked crypto theft, custody risk keeps showing up outside Bitcoin’s base layer.
The same theme appears in institutional choices, including Riot’s BitGo custody shift and Binance’s large Bitcoin reserve transfers.
Market cycle analyst Bob Loukas recently asked whether the decentralized self-custody dream is dead.
We believe incidents like this answer him in the opposite direction: they make Bitcoin self-custody more relevant, not less.
Centralized platforms can still serve trading and fiat on-ramps. Long-term holdings belong where users control the keys.
Can Bitcoin Holders Turn This Into a Buying Opportunity Mindset?
Security scares often create short-term fear around crypto platforms.
Historically, Bitcoin has absorbed those shocks because the network itself keeps settling blocks with fixed supply rules intact.
No exchange balance sheet can inflate Bitcoin’s 21 million cap or rewrite its consensus.
For us, the key takeaway is practical: use exchanges for what they do well, withdraw what you intend to hold, and treat self-custody as the default for savings.
Also watch Bitcoin’s own network health: hashrate stability, mempool conditions and whether spot ETF flows stay constructive while exchange headlines dominate the news cycle.
Watch for transparent post-mortems from BitMart, continued freezes tied to Mercado Bitcoin, and whether other venues raise hot-wallet standards in response.
Bitcoin’s institutional rails keep expanding even while weaker platforms struggle.
That contrast is bullish for the asset that does not need a CEO’s security team to stay solvent.
The coming days will reveal how much of the stolen Mercado Bitcoin flow can still be recovered.
And if more holders move BTC into self-custody after this crypto hack cluster, Bitcoin’s ownership base may look even more resilient than before.
DC Forecasts is a leader in many crypto news categories, striving for the highest journalistic standards and abiding by a strict set of editorial policies. If you are interested to offer your expertise or contribute to our news website, feel free to contact us at [email protected]
Discussion about this post