Polymarket compromised through a third party provider

[DubemIfedigbo001]

As posted on their official X handle a short while ago, a third party provider was compromised which led to some traders losing funds, meanwhile all trading has been halted out of caution.
They've also promised to refund those affected.

We've identified & fixed an issue impacting our international platform, Polymarket⁠.com. One of our 3rd party providers was compromised, and we have referred this to relevant law enforcement.

Anyone who has been impacted will be made whole.

Out of an abundance of caution, we have temporarily halted trading & are working to bring the platform back online.

Source

[Lida93]

I am just reading this too on X and am asking myself what's really happening in 2026, the attacks are  getting scaring by the day and the most scary part is we just don't know what would be next after another.

Polymarket HALTS TRADING, PUTTING THE EXCHANGE IN "CANCEL-ONLY MODE" AND PAUSING RELAYER ACTIONS "WHILE WE INVESTIGATE AN INCIDENT"

THE OFFICIAL STATUS PAGE LISTS A MAJOR OUTAGE AS OF 18:05 UTC

IT COMES AS SEVERAL USERS REPORT ACCOUNTS BEING DRAINED

SOURCE: https://x.com/DegenerateNews/status/2115870444553212256?a=jIFnx1QM8X3a_KhJ-94&s=19…

Polymarket has been hacked, users have reported their money got stolen

>Users reported suspicious activity, missing money and positions being closed without their permission.

>Polymarket blamed the issue on a vulnerability in an external authentication provider.

>Money stolen, some users reported losing funds, but the total losses have not been officially confirmed.

Polymarket says the issue has been resolved, but users are still concerned about how their accounts were compromised.

Source: https://x.com/Pirat_Nation/status/2115876376158908872?a=7PuHAsQUaryHUMR_Kd8&s=19

[Wiwo]

It's always third party comprises all the hack and data leaks that we have experienced in the recent time.

Even the hardware wallet data leak was all aided by third party service provider comprising the entire system.

What I think is that we should expect more to come, because third party service providers are most relied on by many cryptocurrency platforms like exchange or casinos, and there will always be insider backstaping the rest of the team by leaking backdoor to intruders.

[Josefjix]

Just few days ago was predict.fun and today the 3rd party to polymarket is compromised. The prediction market code of operation had been revealed to the hackers, they know every vulnerable point concerning prediction market now. If I were other prediction market platform like Futuur and others, I'll simply recheck our security or upgrade to the latest version.

If any action is not taken, then others will be touched soon by hackers.

[acroman08]

This is the 4th time a gambling platform has been hacked in a little over a month(Duelbits and Gamdom were hacked too). Someone posted several days ago that Predict.fun got hacked too through 3rd party provider, I wonder if the perpetrators here are the same ones who hacked Predict.fun.

They've also promised to refund those affected.

As they should, it is their 3rd party provider's incompetence that caused this to happen, and they'd get a lot of backlash if they didn't.

[stepwilli]

I am just reading this too on X and am asking myself what's really happening in 2026, the attacks are  getting scaring by the day and the most scary part is we just don't know what would be next after another.

The good thing is that they have promised that they are going to make sure that those who got affected in the attack get their funds back, but it's actually true that attacks are increasing day by day, and the crypto industry has been suffering a lot throughout this year through attacks and all. Centralized and regulated platforms like Polymarket or any other casino and betting platform will have to work on their security and also advise their third-party partners to do the same to avoid further problems.

Attackers these days have become more powerful than before most probably because of AI and models that are allowing them to find and misuse security vulnerabilities in systems and platforms. I read a post somewhere today where it was said that OpenAI's latest model GPT-6 Astra has the ability to actually find bugs and vulnerabilities in systems, and the poster was suggesting that people can use this to hunt bug bounties to make some money, but we all know that if such things can be used positively, they can also be used negatively.

The gambling industry will most probably be targeted at large due to the fact that attackers know how much money flows in this area.

[Smartprofit]

Yes, this news shocked me too...🤷

As far as I understand, hackers stole $3 million in assets. Polymarket is a decentralized prediction platform. However, all decentralized platforms interact with centralized systems in some way. Decentralization provides good security, but hackers don't try to attack it directly. They exploit vulnerabilities in centralized systems to attack decentralized financial systems. Almost all recent examples of such attacks confirm this. Moreover, users of decentralized platforms themselves don't have information about the entire ecosystem of the "decentralized platform," so they can't assess the risks in advance.

By the way, in addition to those whose money was stolen, those who were simply placing bets on that fateful day likely also suffered. As far as I understand, trading was suspended for about an hour, but has now resumed.  I hope all our forum members who traded on Polymarket (and I know many forum members trade there) are okay and unharmed.🙋

[EluguHcman]

~SNIP

Polymarket has been hacked, users have reported their money got stolen

>Users reported suspicious activity, missing money and positions being closed without their permission.

>Polymarket blamed the issue on a vulnerability in an external authentication provider.

>Money stolen, some users reported losing funds, but the total losses have not been officially confirmed.

Polymarket says the issue has been resolved, but users are still concerned about how their accounts were compromised.

Source: https://x.com/Pirat_Nation/status/2115876376158908872?a=7PuHAsQUaryHUMR_Kd8&s=19

That is so much red flag for the platform.
Normally for me once a security layer has been broken, the trust level will definitely be shaken and somehow, it won't be tolerable to have your funds trusted in such platform that had not only failed and restored back, but had been unable to figure the responsibility of the source of the attack.

Of course it could also be insider that leaked the keys and not only that the server was attacked.
In cases like this third parties will always be pointed as suspects while insider of the authorities can as well be that selfish of frauding the people.

We should also bear it in mind that even a CEO may have such intentions and that is just how strategic scamming can be.

[Mia Chloe]

As posted on their official X handle a short while ago, a third party provider was compromised which led to some traders losing funds, meanwhile all trading has been halted out of caution.
They've also promised to refund those affected.

The entire nature of the kinda bets presented on poly market is highly biased but in a controversial way. The point is it already pulls so much attention and liquidity so dissolving it is gonna be way difficult. To start with other casinos are actually adopting the trend as a new style of provided bets.

No body should be genuinely surprised actually since it's not even the first time this particular stuff has happened relating to polymarket bets.

[Hispo]

This is the 4th time a gambling platform has been hacked in a little over a month(Duelbits and Gamdom were hacked too). Someone posted several days ago that Predict.fun got hacked too through 3rd party provider, I wonder if the perpetrators here are the same ones who hacked Predict.fun.

They've also promised to refund those affected.

As they should, it is their 3rd party provider's incompetence that caused this to happen, and they'd get a lot of backlash if they didn't.

It seems pretty obvious to be that north Korean and Russian hackers have moved from stealing from casinos and exchanges onto stealing from prediction markets.
This is more serious than people initially asume it is in my opinion. This shows that it does not matter how secure and top-notch a prediction market is, they could still suffer attacks if their third party providers do not have enough security.

So far, the total loss of assets has not been quantified by polymarket, but I would not be surprised if we were talking about millions of dollars lost tho those hackers...

Polymarket better take note of this and seek other third party providers, so this won't ever happen again.

[un_rank]

The post should have been made on their main profile; https://x.com/Polymarket
They have more followers there, so more reach on the post. It may not be a security notice update but it is one that all their users should be made aware of.

There is some pressure online for them to name the rogue provider. They are back live now, so safe to assume the issue has been plugged. They can now give a run down of the breach and how they were able to directly access user funds.

- Jay -

[Justbillywitt]

Does this mean that with all the hacking news that are has been happening lately, these platforms are not taking any precautionary measures to protect themselves against potential hackers? It’s so disappointing to hear that polymarket has been hacked, when predict.fun was just hacked few days ago. It could be that these hackers has already gained access into most of these websites, but they are just waiting for the right time to strike.

[promise444c5]

Well this is not the first time and not the second time either , they said it was magic labs then and I also saw magic[trymagic] as part of the second batch  because I also used gmail for signing in  then..

I had no money in it when it happened anyway..

This time around it is another third party.. Is it that hard to just handle everything all by themselves or they are afraid they won’t be able to shift blames anymore lol.

[adultcrypto]

The spike in security breaches is becoming alarming with some people attributing that to AI while others remain at a loss as to what might be the cause. Just this year we have seen several exchanges,  casinos, crypto wallets and now prediction sites.  If Polymarket is not even spared, that means Web3 as a whole may be up for a huge surprise in the near future. How these hackers manages to evade being caught is another thing that surprises me despite moving large somes of money.

[Sammysmart001]

It's always third party comprises all the hack and data leaks that we have experienced in the recent time.

This are the core weakness of the most the many Web3 platforms today. Platform can do have a completely secure smart contracts but this does not matters if it’s Web2 vendors are weak. For logins, data feeds or APIs if platforms connect to third party tools, they inherit every single security flaw those vendors do have.

Hackers are aware of this and will always target the easiest door available. Until platforms do build systerm in house or strictly audit their third party supply chains if not this supply chain hacks will keep on happening.

[Cantsay]

There is some pressure online for them to name the rogue provider. They are back live now, so safe to assume the issue has been plugged. They can now give a run down of the breach and how they were able to directly access user funds.

- Jay -

I have been scrolling through tweets to see if anyone has information about the third party that was compromised, but nothing has been said.

It is actually concerning that they are still keeping the name of the service a secret, is it that they are trying to protect or are scared of any legal issues? I feel like the information should be made public in case there are others who might be using the same third party.

[Davidvictorson]

~...~

I think in the history books, we are going to remember 2026, especially the las quateur of the year for a long time to come.
There are cyberattacks everywhere.
What can these organizations affected learn from it and what can the ones not affect learn from it.
In my estimation, these look like a very planned and coordinated attack on these platforms.
I wonder what the users trust rating would look like after the affected organizations bounce back.

[Fortify]

As posted on their official X handle a short while ago, a third party provider was compromised which led to some traders losing funds, meanwhile all trading has been halted out of caution.
They've also promised to refund those affected.

It's very generic and doesn't really help you pinpoint where the weakness was in the system, probably intended that way. They have been fumbling hard since losing the crown to Kalshi and this has probably caused them to make a few mistakes as they try to fight back. However this is bound to scare aware some of their traders and you have to wonder when they try to play down things like this how much they actually lost. It could be many millions but they have to act casual and are able to do that as long as they can cover the losses as a private company. I'm not sure they have to declare any losses due to hacking and to keep it all under wraps they'll likely come to a settlement with any traders who were effected by this - at least if they want to keep their reputation and legal battles can cost much more.

[Frankolala]

A big loss for the cryptospace this year because there are numerous hacks here and there. If not directly, it will be from a third-party provider. I hope this will give casinos and exchanges a better clue on how to prevent further hacks in future because it seems that Ai is really helping the hackers to achieve their evil goals.

[tiCeR]

It's always third party comprises all the hack and data leaks that we have experienced in the recent time.

Even the hardware wallet data leak was all aided by third party service provider comprising the entire system.

What I think is that we should expect more to come, because third party service providers are most relied on by many cryptocurrency platforms like exchange or casinos, and there will always be insider backstaping the rest of the team by leaking backdoor to intruders.

Yes but third party could mean anything in my opinion. It could as well be a partnership set up for data handling from the get go and it would still make legal sense to say that a third party was affected. I think the elephant is still in the room: how is it possible that Polymarket user funds are affected when a third party is affected?

What Polymarket is essentially saying is: a third party failed, but no worries, we have you covered. That is not a stupid move.