On December 4, 2021, BitMart identified a security breach related to two of its hot wallets. Within moments of identifying the breach, BitMart shut down multiple systems to limit immediate threats, and also commenced a thorough investigation of all our systems to identify and eliminate potential risks. Based on initial investigation, it appears that approximately $200 million in digital assets were removed by a malicious actor who had gained access to one BSC wallet and one ETH wallet. We are working with cybersecurity specialists to strengthen our defenses against any potential future attacks, and have also been in contact with both law enforcement agencies and other cryptocurrency platforms, as they share our goal of mitigating the risk of attack from nefarious activities.
Safely Restoring Services
On December 7, deposit and withdrawal functions for ETH and some ERC-20 tokens were brought back on. On the night after, Wednesday, December 8, BitMart restored deposit and withdrawal functions for partial BEP-20 tokens. As of last night at 11:00 PM EST, deposit and withdrawal features for multiple mainnet tokens including Bitcoin, Kusama, Polkadot, Solana, NEAR Protocol and more, were resumed.
Trading has also resumed for AVAX, VEIL, and multiple tokens. Functionality for additional tokens will gradually be restored and announced after each passes a thorough security review.
New Deposit Addresses for Security Enhancement
To further guarantee operation in a secured environment, we also replaced all token deposit addresses including BTC, ETH, SOL, and all other tokens. As such, we strongly encourage all users to log into their account and verify the new deposit addresses before initiating any deposits.
Upcoming System Maintenance on December 13
BitMart will be suspending all services to perform system maintenance from 1:00 AM to 3:00 AM on December 13, 2021 EST. We recommend users cancel all uncompleted and pending orders by midnight EST on December 12. Your assets will be safe with BitMart during maintenance.
With sincere appreciation to our community, our team is making unremitting efforts to bring all functions of our platform back online as quickly as possible, while ensuring the security of user assets.