Back to dashboard
Sunday, December 5, 2021 at 18:00 UTC

BitMart

Hot wallets drained across ETH and BSC.

Lost
Funds stolen
$196.00M
Recovered
$0.00M0%
Still outstanding
$196.00M
Chain
Ethereum
Category
CEX
Attack vector
Private Key Compromise
Reported by
SlowMist
Incident ID
h2021-5

Exploit & recovery timeline

  1. Dec 5, 2021 · 16:00 UTC
    Attack preparation

    Attacker wallets funded and staged ahead of the private key compromise exploit against BitMart.

  2. Dec 5, 2021 · 18:00 UTC
    Exploit executed

    $196.0M drained from BitMart on Ethereum via Private Key Compromise.

  3. Dec 5, 2021 · 19:00 UTC
    Detected by SlowMist

    SlowMist flagged the anomalous transactions and published an initial alert.

  4. Dec 5, 2021 · 22:00 UTC
    Protocol response

    BitMart paused affected contracts or withdrawals and began tracing outbound flows.

  5. Dec 6, 2021 · 18:00 UTC
    Funds traced

    Stolen assets followed through mixers, bridges, and exchange deposit addresses.

  6. Jan 4, 2022 · 18:00 UTC
    Funds written off

    No assets recovered; losses absorbed by the protocol, insurers, or users.