In its first known crypto investigation, the FTC seeks information from crypto exchange BitMart about a December 2021 hack that led to $150M-$200M in losses
The Federal Trade Commission is investigating the operators of the BitMart cryptocurrency exchange over a December 2021 hack that led …
Context & Ripple Effects
BitMart disclosed the breach in December 2021, reporting that attackers drained roughly $150M from its Ethereum and Binance Smart Chain hot wallets — a loss the FTC now sizes at $150M-$200M. Eight months later, the agency is seeking information from the exchange's operators in what is described as its first known crypto investigation, a notably different posture from the criminal track regulators have taken elsewhere: the DOJ's criminal probe into assets stolen in the FTX collapse and the January charges tied to the FTX hack both run through law enforcement, not consumer protection.
First-order effects
- The FTC's information demand puts BitMart's operators — a company that has since stopped accepting new orders and plans to wind down trading by January 31, 2027 — under formal scrutiny for the first time, with its hot-wallet security practices and user-loss handling as the apparent subject.
Second-order effects
- Other exchanges now face a consumer-protection precedent: if the FTC treats a hot-wallet breach as an actionable failure, security architecture becomes an enforcement surface alongside the fraud cases DOJ has pursued, raising the compliance bar for custody practices across the sector.
Third-order effects
- With the FTC entering crypto alongside DOJ's criminal FTX investigations, exchange breaches are converging into a two-track accountability model — criminal prosecution of thieves, civil scrutiny of platforms — which points toward codified custody and disclosure standards for exchanges rather than ad hoc responses.
The trend: US regulators are closing the accountability gap around exchange hacks, with the FTC's consumer-protection track now running parallel to DOJ's criminal prosecutions.