This is the latest in a series of financially motivated online attacks directed at cryptocurrency organizations. For example, last week $120 million (USD) was stolen from BadgerDAO and $30 million (USD) was stolen from MonoX Finance. Over $600 million was stolen from PolyNetwork earlier this year, although the assets were eventually returned by the alleged hacktivist. $97 million (USD) was stolen from Liquid, with 10 other organizations this year disclosing large losses. This emphasizes a key point in security – the use of public key infrastructure (PKI) does not guarantee privacy or security – particularly when the private keys that take the place of passwords are not appropriately secured. Social engineering tactics, as well as inappropriate disclosure of private keys when such keys are not segregated from development and Internet facing operations, often result in criminals obtaining illicit access to internal networks and services which can then be further exploited.

1/4 In response to this incident, BitMart has completed initial security checks and identified affected assets. This security breach was mainly caused by a stolen private key that had two of our hot wallets compromised. Other assets with BitMart are safe and unharmed.

— Sheldon Xia (@sheldonbitmart) December 6, 2021

https://thehackernews.com/2021/12/hackers-steal-200-million-worth-of.html

https://support.bmx.fund/hc/en-us/articles/4411998987419