Current outcome
Polymarket's systems were restored and operational after a temporary trading halt and cancel-only mode caused by a compromised third-party provider; impacted users were promised reimbursement, with law enforcement referral in the background.
Progress timeline
3 material updates- #01
Multiple Polymarket Users Report Stolen Funds as Platform Restricts Trading and
Polymarket users reported unauthorized fund transfers and hundreds of thousands of dollars in losses, prompting the platform to enter cancel-only mode, halt relayer actions, and open an investigation into a suspected frontend compromise.
Source evidence: wublockchainenglish
- #02
Polymarket Pauses Trading as Prediction Market Investigates Security Incident
Polymarket confirmed a third-party provider was compromised, referred the matter to law enforcement, and said affected users will be made whole; researchers linked a DebugBear-hosted wallet-draining script to a suspected attacker wallet holding about $2.65 million in POL.
State after update: Polymarket remains in cancel-only mode with relayer actions paused while investigating a confirmed third-party provider compromise; law enforcement has been notified, affected users are promised reimbursement, and a suspected attacker wallet and malicious frontend script have been identified.
Source evidence: Decrypt
- #03
Polymarket suspended trading amid reports of user funds being drained
Polymarket's systems were restored and all were reported operational as of 19:05 UTC after trading was temporarily halted and the platform entered cancel-only mode due to a compromised third-party provider.
State after update: Polymarket's systems were restored and operational after a temporary trading halt and cancel-only mode caused by a compromised third-party provider; impacted users were promised reimbursement, with law enforcement referral in the background.
Source evidence: Cointelegraph