Risk Radar

/ 5 developments

Crypto Risk Monitor — September 10, 2026

CEXVia tracks BitMart’s Alvarez & Marsal review, India FIU action against 15 VASPs, U.S. sanctions and $52M crypto restraint tied to Xinbi Guarantee, the Nomic nBTC double-spend, XRP Healthcare’s 4,011-wallet flaw, and Phemex delisting deadlines.

September 10, 2026Last updated 10:30 UTC7 min read

September 10 is primarily a regulation, restructuring and recovery day. The most important developments are not a new nine-figure exchange hack, but several high-consequence events that directly affect customer access, AML market access, Bitcoin-backed assets and wallet-key safety.

The highest-priority centralized-exchange update is BitMart. On September 9, BitMart appointed Alvarez & Marsal (A&M) as external financial adviser. A&M will assess BitMart’s financial position, stakeholder issues, arrangements for orderly withdrawals and possible paths forward, including phased resumption and third-party alternatives. This is a meaningful governance step, but it is not the completed restructuring roadmap BitMart previously aimed to provide by September 9. The reviewed announcement still does not publish a verified reserve total, liabilities schedule, recovery percentage or date-certain withdrawal timetable.

Read the update: BitMart Restructuring and Withdrawal Risk

India has escalated enforcement against offshore crypto platforms. FIU-IND issued non-compliance notices to 15 VASPs and also issued app/URL takedown notices. The named providers are Weex, Blofin, Rezorex, Bitunix, DigiFinex, Toobit, XT.com, Latoken, WOO X, Pionex, ChangeNow, SimpleSwap, Fixedfloat, WhiteBIT and Guardarian. India says AML/CFT obligations are activity-based and apply regardless of whether a provider is physically located in India.

Read the detail: India FIU Action Against 15 VASPs

The United States also launched a significant sanctions-and-seizure action against Xinbi Guarantee. Treasury designated Xinbi as a significant transnational criminal organization and also sanctioned SafeW Technology and Anwen Technology. Treasury says Xinbi’s marketplace processed the equivalent of more than $24 billion in digital assets and fiat currency since around 2022. In a coordinated action, DOJ said authorities restrained approximately $52 million in cryptocurrency in one day and seized infrastructure and digital-asset wallets linked to the network.

Read the detail: Xinbi Guarantee Sanctions and $52M Crypto Restraint

On the security side, Nomic / Osmosis Alloyed BTC is today’s most important asset-backing incident. Reporting based on Osmosis disclosures says a double-spend vulnerability in Nomic’s transfer/forwarding path resulted in approximately 39.84 nBTC entering Alloyed BTC, representing roughly 36% of its backing. Key functions were paused and an emergency upgrade reportedly froze 22.65 BTC linked to the attacker.

Read the detail: Nomic nBTC Exploit and Alloyed BTC Backing Risk

A separate wallet-layer incident affects XRP Healthcare’s XRPH Wallet. The project’s incident report says a wallet-generation defect introduced on June 13, 2023 materially reduced the effective keyspace and made offline private-key reconstruction feasible. The September 3 attack drained 4,011 wallets, including approximately 267,664 XRP, 23.2 million XRPH and 2.43 million XRPHAI, with reported losses around $450,000–$452,000. The project says every wallet generated by the affected application should be treated as compromised.

Read the detail: XRP Healthcare Wallet Key-Generation Flaw

Liquid Network remains Critical, but no new milestone supersedes the already confirmed return of 3,400 BTC. Roughly 598.5 BTC remains unresolved in the last verified reporting.

Today also contains a Phemex asset-access deadline. BERA, MIRA, BARD, ELSA and JST spot markets are scheduled to be delisted at 10:00 UTC on September 10, with normal deposits and withdrawals ending at the same time.

① Today’s Highest-Priority Alerts

RiskEntityEventTimeLatest StatusEvidence TypeContinue MonitoringNew vs Previous Day
CriticalBitMartRestructuring / withdrawalsSep. 9–10A&M appointed; financial review begins; no recovery rate or withdrawal timetableOfficialYesMajor restructuring update
HighFIU-IND / 15 VASPsAML non-compliance / takedownSep. 9Notices and app/URL takedowns issuedOfficialYesNew enforcement
CriticalXinbi GuaranteeOFAC sanctions / DOJ crypto restraintSep. 9Xinbi designated; SafeW/Anwen sanctioned; ~$52M restrainedOfficialYesNew sanctions + seizure
CriticalNomic / OsmosisnBTC double-spend / backing impairmentSep. 939.84 nBTC implicated; ~36% backing; 22.65 BTC frozenMedia citing protocol + On-chainYesNew backing incident
HighXRP HealthcareWallet-generation flawSep. 3–84,011 wallets drained; all generated wallets treated as compromisedProject report via Media + On-chainYesRoot cause clarified
HighPhemexFive spot delistings / withdrawal cutoffSep. 10 10:00 UTCBERA/MIRA/BARD/ELSA/JST trading, deposits and standard withdrawals endOfficialYesHard deadline today
CriticalLiquid NetworkBridge reserve incidentOngoing3,400 BTC returned; ~598.5 BTC unresolvedOfficial/Media + On-chainYesNo major new verified update
CriticalOrionxPermanent shutdown / custody gapOngoingWithdrawals suspended; restitution unresolvedCompany/Regulator/MediaYesNo major new update

② Exchange Exit, Shutdown and Withdrawal Risk

BitMart — Critical

A&M’s appointment makes the restructuring process more formal, but the practical recovery questions remain unanswered: available assets, liabilities, creditor ranking, recovery percentage and withdrawal dates.

Phemex — High

At 10:00 UTC, BERA, MIRA, BARD, ELSA and JST lose normal spot-market and standard deposit/withdrawal support. Post-cutoff withdrawal requests move to customer-support handling.

AscendEX — Critical

No verified restoration of normal withdrawals or confirmed claims-portal functionality was identified.

Orionx — Critical

Permanent shutdown, frozen withdrawals and the custody shortfall remain unresolved.

③ Regulation and Licensing

India FIU — High

India’s action directly targets market access. The government explicitly states that offshore status does not remove PMLA obligations where covered services are provided to Indian users.

U.S. Treasury / DOJ — Critical

Xinbi is a sanctions and illicit-finance case rather than an exchange licensing matter. The action combines OFAC designation, infrastructure seizure and crypto restraint.

AUSTRAC — High, ongoing

Australia’s removal of 45 remittance/VASP registrations remains a parallel signal of tougher AML supervision.

ASIC — High

September 30 remains Australia’s licensing-transition deadline for affected digital-asset firms.

④ Hacks, Vulnerabilities and Asset Loss

Nomic / Osmosis — Critical

The main risk is backing integrity. A failure in one BTC representation propagated into Alloyed BTC and forced mint/redemption and transfer restrictions.

XRP Healthcare — High

A weak key-generation process is particularly dangerous because already generated private keys cannot be made safe simply by updating an app.

Liquid Network — Critical

Partial recovery is substantial, but remaining funds and full bridge normalization are unresolved.

Notional / Vesu / Tectonic

No new fact today supersedes their most recent recovery and loss-accounting status.

⑤ User Complaints and Operational Anomalies

No new Community-only cluster independently met the threshold for a platform-wide High/Critical alert. BitMart recovery estimates, AscendEX claim priority, Phemex support outcomes and XRP Healthcare reimbursement claims remain Community / Unverified unless independently corroborated.

⑥ On-chain and Market Anomalies

Nomic/Osmosis is today’s clearest backing anomaly: 39.84 nBTC reportedly represented about 36% of Alloyed BTC backing, forcing emergency restrictions.

DOJ says approximately $52M in cryptocurrency was restrained in the Xinbi action. XRP Healthcare’s stolen assets were separately traced into Ethereum, where roughly 445,198 DAI was reported at a destination address during the investigation.

⑦ Watchlist

Date / WindowEventWhat CEXVia Is Watching
ImmediateBitMartA&M assessment, asset inventory, withdrawal plan
ImmediateNomic / OsmosisGovernance recovery, frozen BTC, restoration of backing
ImmediateXinbiAdditional wallet designations, seizures, restitution
ImmediateXRP HealthcareReplacement wallet, freezes, reimbursement
Sep. 10 10:00 UTCPhemexFive-token delisting and withdrawal cutoff
Sep. 11KrakenTrading/deposit halt for 21 assets
Sep. 11CoinExWAVES-group trading/deposit termination
Mid-SepZilliqaRetail recovery tooling
Sep. 23BitMEXTrading closure
Sep. 30Router ProtocolOperations wind-down
Sep. 30ASICAustralia licensing deadline
Oct. 1Holdstation / UNOThailand access blocking

⑧ No New Development Today, but Still High Risk

Liquid Network — Critical: ~598.5 BTC and full bridge normalization remain unresolved.

Orionx — Critical: shutdown and custody shortfall remain open.

AscendEX — Critical: claims access and withdrawals remain uncertain.

Coldcard — Critical: stolen-fund laundering remains active across chains.

GoMining-linked wallets — High / Developing: no final official root cause.

Aquifer — High: no verified qualifying recovery.

Zilliqa — Critical: retail migration and compensation governance remain pending.

FAQ

What is the most important CEX update today?

BitMart appointed Alvarez & Marsal, but still has not published a verified recovery percentage or withdrawal timetable.

Which platforms did India name?

Fifteen, including Weex, Blofin, Bitunix, DigiFinex, Toobit, XT.com, WOO X, Pionex and WhiteBIT.

How much crypto did DOJ restrain in the Xinbi action?

Approximately $52 million.

What happened to Nomic’s nBTC?

A reported double-spend affected 39.84 nBTC and roughly 36% of Alloyed BTC backing; 22.65 BTC was reportedly frozen.

How many XRP Healthcare wallets were drained?

4,011.

Which Phemex assets hit today’s cutoff?

BERA, MIRA, BARD, ELSA and JST.