When a crypto exchange gets hacked, the first question is always how. The second, and arguably more damning question, is why the defenses weren't there to stop it. For BitMart, the answer to that second question has now come directly from the top: the exchange's own founder has publicly acknowledged that the security team was "severely understaffed" at the time of the latest breach — a confession that cuts to the heart of an industry-wide problem that refuses to go away.
The admission arrived alongside a broader company restructuring, suggesting that BitMart's internal architecture was already under significant strain before attackers found their opening. Restructurings at crypto exchanges are rarely clean affairs. They tend to involve headcount reductions, shifting priorities, and organizational gaps — precisely the kind of conditions that sophisticated threat actors look for when probing a target. The timing here is not coincidental. It is instructive.
What makes this episode particularly troubling is the public nature of the founder's warning. Rather than the usual crisis-communications playbook — reassure users, promise an investigation, announce a compensation fund — BitMart's leadership chose candor about an operational failure. That candor deserves acknowledgment, but it also demands scrutiny. Knowing your security team is severely understaffed and continuing to operate a platform that holds customer funds is not just a management oversight. It is a risk imposed on users who had no visibility into those staffing decisions.
The situation deepens when you layer in what blockchain analysts have uncovered. Investigators flagged suspicious fund transfers that may connect this incident to the Mercado Bitcoin hack — a separate breach that has already drawn attention from the security community. If that linkage is confirmed, it would suggest that the same actor, or the same exploit methodology, is moving across platforms. That is a materially different threat environment than a one-off opportunistic attack. It points toward a coordinated campaign targeting exchanges during moments of internal vulnerability, and it raises urgent questions about cross-platform intelligence sharing in the industry.
BitMart is not new to security failures. The exchange was hit by a significant exploit in December 2021, losing approximately $196 million in assets across its Ethereum and Binance Smart Chain hot wallets. That breach was one of the largest exchange hacks of that year, and it came with the same uncomfortable optics: a platform trusted with customer funds that proved unable to defend them. Five years later, the company finds itself in an eerily similar position, with its founder again on the defensive, again explaining to users why the safeguards weren't adequate. The repetition here is not a minor footnote — it is the story.
The broader industry context makes this harder to dismiss as an isolated case. Exchanges have long known that security infrastructure is not a static investment. Threat actors evolve their techniques continuously, and the arms race between attackers and defenders demands ongoing, aggressive resourcing. When a company enters a restructuring phase and apparently allows its security staffing to fall to critically low levels, it is making an implicit choice — prioritizing cost management or organizational realignment over the protection of user assets. That choice, when it results in a hack, is not simply bad luck. It is a governance failure.
Regulators watching this episode will note the founder's own words as a matter of public record. The admission that the security team was "severely understaffed" is precisely the kind of disclosure that invites closer examination of whether the platform met any applicable duty-of-care obligations to its users. As jurisdictions worldwide tighten their frameworks around crypto exchange operations — from licensing requirements to mandatory security audits — statements like this one will increasingly carry regulatory weight, not just reputational consequences.
For users still holding assets on BitMart, the message embedded in the founder's statement is unambiguous: the exchange knew it was running lean on security and kept the doors open anyway. Whether that rises to negligence is a question for lawyers and regulators. What is not in question is that the burden of that decision fell entirely on customers who trusted the platform with their funds. Until the exchange completes its restructuring, publishes a credible security audit, and demonstrates that its staffing gaps have been genuinely addressed, that burden remains. The suspicious transfers flagged by analysts — potentially connecting this breach to the Mercado Bitcoin incident — suggest the threat environment is not waiting for BitMart to get its house in order. Neither should its users.
Written by the editorial team — independent journalism powered by Bitcoin News.