- Bitmart recently confirmed that a hacker made away with $200 million in crypto assets following a hot wallet compromise.
- Peckshield first called attention to the hack, noting steady outflows of entire token balances.
- The hacker sent the stolen assets to an Ethereum mixing service, making the funds challenging to track.
Popular cryptocurrency exchange Bitmart has recently suffered a hack, with an estimated $200 million in losses as a result. The hacker made away with over 20 tokens, including Shiba Inu, Binance Coin, SafeMoon and used decentralized exchange 1inch to swap the stolen assets for Ethereum.
Bitmart suffers from security breach
Security analysis firm Peckshield revealed the alleged hack on December 4, noting that there have been steady outflows of entire token balances, worth tens of millions of dollars to an address currently labeled as the “Bitmart Hacker.”
At first, Peckshield approximated the losses to be worth $100 million among various cryptocurrencies on Ethereum and Binance Smart Chain. Bitmart representatives addressed the suspicion on its official Telegram channel, noting that the outflows in assets were only routine withdrawals.
However, after a few hours, the exchange’s CEO Sheldon Xia stated that Bitmart did indeed suffer from a “security breach” from the platform’s Ethereum and Binance Smart Chain hot wallets.
Xia added that the crypto exchange will “conduct a thorough security review” and that withdrawals from the platform will be suspended until further notice. Bitmart is yet to determine which possible methods the hacker used to remove assets from the hot wallet.
Peckshield indicated that the hack was a “straightforward case of transfer-out, swap and wash.”
The hacker has used decentralized exchange aggregator 1inch to swap the stolen funds for Ethereum by sending the assets to an Ethereum mixing service, Tornado Cash, to make it harder for the hacked funds to be tracked.
Bitmart stated that the affected Ethereum and Binance Smart Chain hot wallets only contained a “small percentage” of the exchange’s assets. The firm further confirmed that the other wallets remain “secure and unharmed.”
Another exploit occurred recently on decentralized finance protocol BadgerDAO, which led to a loss of $50 million on cryptocurrency lending platform Celsius.
Information on these pages contains forward-looking statements that involve risks and uncertainties. Markets and instruments profiled on this page are for informational purposes only and should not in any way come across as a recommendation to buy or sell in these assets. You should do your own thorough research before making any investment decisions. FXStreet does not in any way guarantee that this information is free from mistakes, errors, or material misstatements. It also does not guarantee that this information is of a timely nature. Investing in Open Markets involves a great deal of risk, including the loss of all or a portion of your investment, as well as emotional distress. All risks, losses and costs associated with investing, including total loss of principal, are your responsibility. The views and opinions expressed in this article are those of the authors and do not necessarily reflect the official policy or position of FXStreet nor its advertisers. The author will not be held responsible for information that is found at the end of links posted on this page.
If not otherwise explicitly mentioned in the body of the article, at the time of writing, the author has no position in any stock mentioned in this article and no business relationship with any company mentioned. The author has not received compensation for writing this article, other than from FXStreet.
FXStreet and the author do not provide personalized recommendations. The author makes no representations as to the accuracy, completeness, or suitability of this information. FXStreet and the author will not be liable for any errors, omissions or any losses, injuries or damages arising from this information and its display or use. Errors and omissions excepted.
The author and FXStreet are not registered investment advisors and nothing in this article is intended to be investment advice.