BitMart founder confirms minor security breach linked to Mercado Bitcoin attackers

Sheldon Xia said the exchange is operating with a bare-bones team following recent restructuring. The breach occurred as the industry reels from a $6.3bn hack at Binance.

By Akshat Mishra, YourKhabri DeskNov 4, 2026, 04:51 AM UTC1 min readBitMartSecurityHacksMercado Bitcoin

Key takeaways

1BitMart founder Sheldon Xia confirmed a minor security breach on 4 November.
2The attack may be linked to threat actors who targeted Brazil's Mercado Bitcoin.
3Xia said the exchange is understaffed following a recent restructuring of the core team.

BitMart founder Sheldon Xia confirmed on 4 November that the cryptocurrency exchange suffered a minor security breach. Xia said the company took immediate action to investigate the intrusion and strengthen its security protocols. Preliminary findings from the exchange suggest the attackers may be the same group that targeted Mercado Bitcoin, a major Brazilian exchange, in a simultaneous exploit.

The breach comes at a time when BitMart is operating with a core team that Xia described as bare-bones. He said recent restructuring has left the firm understaffed across its security operations. The founder also cited external pressures including doxxing, threats against users, and retaliatory actions from former employees as factors complicating the exchange's defence efforts.

BitMart is a global trading platform that has faced security challenges in the past. This latest breach follows a period of intense pressure on the sector, including a $6.3bn hack at Binance in late October. YourKhabri previously reported that the Binance incident led to the freezing of nearly $1bn in USDT and prompted South Korean regulators to review bank exposure to such losses.

The incident shows the risks facing smaller exchange teams during periods of internal restructuring and external threats. While Xia said the remaining staff is working to protect user data and platform assets, the link to the Mercado Bitcoin attack suggests a coordinated effort by threat actors. Traders will watch for further disclosures on the total value of lost assets and whether other exchanges report similar intrusions.

Also reported by

Reported and edited by the YourKhabri desk under our editorial policy. Nothing here is investment advice.