Threat actors stole more than $150 million worth of cryptocurrency tokens from BitMart platform

Threat actors stole more than $150 million in various cryptocurrencies from the cryptocurrency trading platform BitMart.

Cryptocurrency trading platform BitMart has disclosed a security breach, threat actors stole than $150 million in various cryptocurrencies.

“We have identified a large-scale security breach related to one of our ETH hot wallets and one of our BSC hot wallets today. At this moment we are still concluding the possible methods used. Hackers were able to withdraw assets of the value of approximately 150 million USD.” reads the security breach notices published by the company.

“The affected ETH hot wallet and BSC hot wallet carry a small percentage of assets on BitMart and all of our other wallets are secure and unharmed. We are now conducting a thorough security review and we will post updates as we progress. At this moment we are temporarily suspending withdrawals until further notice. We beg for your kind understanding and patience in this situation.”

BitMart’s chief executive Sheldon Xia revealed in a series of tweets that attackers stole a stolen private key for two of our hot wallets compromised. The platform has temporarily suspended withdrawals until further notice, Xia also said that it plans to resume the operations on December 7.

Xia added that the affected ETH hot wallet and BSC hot wallet carry a small percentage of assets on BitMart, all of its other wallets are secure.

1/4 In response to this incident, BitMart has completed initial security checks and identified affected assets. This security breach was mainly caused by a stolen private key that had two of our hot wallets compromised. Other assets with BitMart are safe and unharmed.

— Sheldon (@sheldonbitmart) December 6, 2021

Researchers from Blockchain security company PeckShield are analyzing the transactions associated with the cyber heist and estimated the total loss to be around $200 million.

Total estimated loss: ~200M (~100M on @ethereum and ~96M on @BinanceChain ). (Previously we only counted the loss on @ethereum). And here is the list of affected assets/amounts on @BinanceChain pic.twitter.com/cXXApDFtd7

— PeckShield Inc. (@peckshield) December 5, 2021

Recently other major attacks made the headlines, such as the security breaches suffered by Cream Finance, Liquid, BadgerDAO, and bZx

Follow me on Twitter: @securityaffairs and Facebook

[adrotate banner=”9″]

[adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, cryptocurrency)

[adrotate banner=”5″]

[adrotate banner=”13″]