$391,000. That's the number everyone will scroll past today — and it's exactly why I'm writing about BitMart.
Founder Sheldon Xia confirmed on Nov 2 that about $391,000 was drained from BitMart-linked wallets on Base, Arbitrum and Optimism. Small money next to this week's other headlines, sure. But on-chain data shows those outflows began 53 minutes before the attacker turned to Mercado Bitcoin the same day — a roughly $48.6M hit — and Xia says preliminary investigations point to the same group behind both. Read that sequence plainly: BitMart looks like the warm-up, or the first stop, before the main event.
Here's the part that should change your behaviour, not just your timeline. BitMart announced its wind-down back in July, with full closure set for January 31, 2027, and it has run on a core team since — its security team, by its own telling, understaffed. A closing exchange is a soft target: fewer eyes, slower response, and users who left balances sitting there because 'there's still time' before the deadline. Attackers know that too.
And unlike Mercado, which pledged to cover losses, Xia's post says nothing about whether user balances were affected or whether BitMart plans to cover anything. Undisclosed is not covered — don't read it as reassurance.
The wider context is grim: exploit trackers now put 2026 thefts at $8.776B, more than triple 2025's $2.715B, and $BTC still holding near $78,000 tells you the market has, so far, absorbed each incident rather than repriced the risk. That absorption is not safety.
My rule from this one is simple and immediate: the moment any exchange you use announces a wind-down, treat its closure date as irrelevant and get your funds off that week, not that quarter. How many of you still have dust or old balances sitting on platforms you barely check?
Founder Sheldon Xia confirmed on Nov 2 that about $391,000 was drained from BitMart-linked wallets on Base, Arbitrum and Optimism. Small money next to this week's other headlines, sure. But on-chain data shows those outflows began 53 minutes before the attacker turned to Mercado Bitcoin the same day — a roughly $48.6M hit — and Xia says preliminary investigations point to the same group behind both. Read that sequence plainly: BitMart looks like the warm-up, or the first stop, before the main event.
Here's the part that should change your behaviour, not just your timeline. BitMart announced its wind-down back in July, with full closure set for January 31, 2027, and it has run on a core team since — its security team, by its own telling, understaffed. A closing exchange is a soft target: fewer eyes, slower response, and users who left balances sitting there because 'there's still time' before the deadline. Attackers know that too.
And unlike Mercado, which pledged to cover losses, Xia's post says nothing about whether user balances were affected or whether BitMart plans to cover anything. Undisclosed is not covered — don't read it as reassurance.
The wider context is grim: exploit trackers now put 2026 thefts at $8.776B, more than triple 2025's $2.715B, and $BTC still holding near $78,000 tells you the market has, so far, absorbed each incident rather than repriced the risk. That absorption is not safety.
My rule from this one is simple and immediate: the moment any exchange you use announces a wind-down, treat its closure date as irrelevant and get your funds off that week, not that quarter. How many of you still have dust or old balances sitting on platforms you barely check?
