Polymarket compromised through a third party provider

[CryptoBuds]

Out of an abundance of caution, we have temporarily halted trading & are working to bring the platform back online.

Third party vendor was compromised, leading to pop ups that resulted in draining users. And they've stopped trading, thinking their responsibility has come to end! If any major Web3 prediction platform ends up compromising user security then all because of issue stemming from its Web2 frontend or thirdparty supply chain that would be serious failure. In that case there is no such thing as onchain trust.

Are there no supply chain audit on these platform? Shouldn't Polymarket's smart contracts be secure? So why weren't attack surfaces and dependency of thirdparty scripts and other dependencies used by their website checked!

[Joy_learns_crypto]

It's not only in 2026, attackers like all of these happens in any year, it something that is not strange that's why platforms invest strongly in cyber security and any other ways to beef up their security.
One thing I like about this one in particular and from what I am reading here is that Polymarket said anyone that was affected will be attended to, the attackers aren't strange but there would be understanding if those affected get this reassurance that Polymarket gave theirs.

[Alphakilo]

It's always third party comprises all the hack and data leaks that we have experienced in the recent time.

Even the hardware wallet data leak was all aided by third party service provider comprising the entire system.

What I think is that we should expect more to come, because third party service providers are most relied on by many cryptocurrency platforms like exchange or casinos, and there will always be insider backstaping the rest of the team by leaking backdoor to intruders.

Am very much perturbed by the rate of hack ongoing these days despite all regulations and policies that is geared towards ensuring safety of users funds and their wallets. It's almost as if quantum computers are already here and is being used for this along with the aid of third party involvement and AI tools, because I wonder what would be the case when quantum computers actually come out in the open and can easily be accessible by anyone with the funds to afford it and use it.

[acroman08]

So far, the total loss of assets has not been quantified by polymarket, but I would not be surprised if we were talking about millions of dollars lost tho those hackers...

Yep, after doing a quick search on Google, the hacker got millions of dollars from Polymarket. According to this article, around $2.6M got drained from Polymarket. The article said that Arkham data shows that the suspected attacker's wallet holds $2.65M in POL.

[Chibit01]

I am just reading this too on X and am asking myself what's really happening in 2026, the attacks are  getting scaring by the day and the most scary part is we just don't know what would be next after another.

Yesterday, when the news of a prediction market hack happened, a user on this forum raised the question if this is the new area hackers are focusing on, and today there is a hack of Poly market and Binance exchanges. Tomorrow we don't know which one is going to be next. The internet space is scary in ghe5year 2026.

[Patikno]

As posted on their official X handle a short while ago, a third party provider was compromised which led to some traders losing funds, meanwhile all trading has been halted out of caution.
They've also promised to refund those affected.

We've identified & fixed an issue impacting our international platform, Polymarket⁠.com. One of our 3rd party providers was compromised, and we have referred this to relevant law enforcement.

Anyone who has been impacted will be made whole.

Out of an abundance of caution, we have temporarily halted trading & are working to bring the platform back online.

Source

Wow, I thought Polymarket wouldn't be attacked and compromised, but it turns out it happened. Yesterday, the predict.fun site was also in the news due to an attack, and now it is happening to a site as big as Polymarket. Hopefully, other prediction market sites won't experience the same thing, as that would be even more shocking.

Predict.fun was allegedly attacked due to third-party documentation, and now Polymarket has also been attacked due to a third-party provider. There is no further information regarding these cases yet, but I think we need to know more if anything comes out. It would be a shame to miss out on important information related to something like this.

[AVE5]

It's always third party comprises all the hack and data leaks that we have experienced in the recent time.

Even the hardware wallet data leak was all aided by third party service provider comprising the entire system.

What I think is that we should expect more to come, because third party service providers are most relied on by many cryptocurrency platforms like exchange or casinos, and there will always be insider backstaping the rest of the team by leaking backdoor to intruders.

You're right but it's unfortunate as said that we can expect to such compromising insecurity incident because, MOST trader's can't do without the exchange for easy navigations of their crypto currencies transactions.
Sure on this side of third party provider platforms, players are also in the cycle becoming victims of similar threats.
Is it really possible that third party service providers will go extinction? Of course not instead, the layer 2 had even been one of the means that encourages adoptions due to regulations influences.

[Hispo]

So far, the total loss of assets has not been quantified by polymarket, but I would not be surprised if we were talking about millions of dollars lost tho those hackers...

Yep, after doing a quick search on Google, the hacker got millions of dollars from Polymarket. According to this article, around $2.6M got drained from Polymarket. The article said that Arkham data shows that the suspected attacker's wallet holds $2.65M in POL.

Honestly, I thought it was going to be more money stolen from Polymarket, considering the huge amount of daily volume they manage thanks to it's big popularity on prediction markets.

Not long ago, we have also seen some news there has been a serious hack against Binance, compromising billions of dollars. Alledgedly people's money is safe the withdrawals will resume in no time, but it is such a huge coincidence this hack also happened today, I would rule out the same hackers of polymarket are the same who stole from Binance.

[Alex077]

As posted on their official X handle a short while ago, a third party provider was compromised which led to some traders losing funds, meanwhile all trading has been halted out of caution.
They've also promised to refund those affected.

It's very generic and doesn't really help you pinpoint where the weakness was in the system, probably intended that way. They have been fumbling hard since losing the crown to Kalshi and this has probably caused them to make a few mistakes as they try to fight back. However this is bound to scare aware some of their traders and you have to wonder when they try to play down things like this how much they actually lost...

If the incident really was caused by a third-party provider getting hacked, then there's a pretty obvious question: why were problems at an outside company able to cause financial losses for Polymarket users? The same goes for its competition with Kalshi. I don't see enough evidence to link the hack to Polymarket's attempts to regain its leading position in the prediction market industry.

But at the same time, I agree that promising to compensate affected users is an important step, but a promise alone isn't enough. That's why transparency about the investigation, timely compensation for affected users, and fixing the security issues that led to the hack will show just how seriously Polymarket takes the security of its users.

[eisen33]

It's not only in 2026, attackers like all of these happens in any year, it something that is not strange that's why platforms invest strongly in cyber security and any other ways to beef up their security.
One thing I like about this one in particular and from what I am reading here is that Polymarket said anyone that was affected will be attended to, the attackers aren't strange but there would be understanding if those affected get this reassurance that Polymarket gave theirs.

These are the standard responses you get whenever a platform suffers an attack, they promise that everything will be fine and that all users will be reimbursed. We've seen this happen year after year, and 2026 is no exception, but I get the impression that there have been far too many attacks in 2026, especially during the second half of the year. I think AI is helping hackers identify more vulnerabilities in security systems, which is contributing to an increase in successful cyberattacks.

[DrBeer]

I've been following this "month of hacks", and to be honest, I'm a little shocked. No, not by the hacks themselves, but by the details of how they happened.

It'll certainly be interesting to hear what happened with Polymarket, but for example, regarding the Binance hack, reports say it was caused by the compromise of a single DevOps's laptop. A SINGLE DevOps! At the largest exchange, all it takes is one laptop belonging to one DevOps to drain over $6 billion!!! Do you realize what the security level is like at these platforms?

[Lida93]

I am just reading this too on X and am asking myself what's really happening in 2026, the attacks are  getting scaring by the day and the most scary part is we just don't know what would be next after another.

The good thing is that they have promised that they are going to make sure that those who got affected in the attack get their funds back,

For What's worth it, this could at least calm their customers and keep hope alive that the platform could still operate normally again in time.

~SNIP

Snip

That is so much red flag for the platform.
Normally for me once a security layer has been broken, the trust level will definitely be shaken and somehow, it won't be tolerable to have your funds trusted in such platform that had not only failed and restored back, but had been unable to figure the responsibility of the source of the attack.

Of course it could also be insider that leaked the keys and not only that the server was attacked.
In cases like this third parties will always be pointed as suspects while insider of the authorities can as well be that selfish of frauding the people.

We should also bear it in mind that even a CEO may have such intentions and that is just how strategic scamming can be.

It's an unfortunate circumstance and also too soon to assume they may not recover neither uncover the cause and source of vulnerability that led to this exploit on their platform.  As days goes many details may continue to unveil, I believe it so.

I remember when stake.com was hacked the last time it was a huge amount but they bounced back and continued to enjoy their community trust, so in this case it's left for the polymarket how they gonna handle theirs to preserve their users trust still.

[Perfectbaby]

I just do not understand the rate of hack around the space. Like, I want to know if they aren't caring about security or what?
Because as I know, the rate at which some platforms are being piped is becoming alarming.
I wasn't expecting this to happen to polymarket so suddenly because as I know, one needs to connect their wallet to make trades or gamble on that platform.

[KTChampions]

I am just reading this too on X and am asking myself what's really happening in 2026, the attacks are  getting scaring by the day and the most scary part is we just don't know what would be next after another.

Thanks to AI, we all learned how crappy our existing code, infrastructure, and architecture are. AI has increased hackers' capabilities hundreds of times over, previously, they didn't have time to check "everything," but now they do. It's strange that those responsible for security seem to be reacting to problems rather than trying to prevent them. I hope this surge in hacks is temporary and stabilizes soon, otherwise it will be too costly for everyone - both businesses and consumers. It's good that the damage to Polymarket is minimal, it seems they will easily survive this.

[bakasabo]

I am just reading this too on X and am asking myself what's really happening in 2026, the attacks are  getting scaring by the day and the most scary part is we just don't know what would be next after another.

Thanks to AI, we all learned how crappy our existing code, infrastructure, and architecture are. AI has increased hackers' capabilities hundreds of times over, previously, they didn't have time to check "everything," but now they do. It's strange that those responsible for security seem to be reacting to problems rather than trying to prevent them. I hope this surge in hacks is temporary and stabilizes soon, otherwise it will be too costly for everyone - both businesses and consumers. It's good that the damage to Polymarket is minimal, it seems they will easily survive this.

It is strange that AI is used to find a breach in security, contract or anywhere else to steal money, but projects themselves dont AI to find everything first and fix that. I suppose they have been doing that, but they never announce that they have found and fixed something.

Year 2026 hasnt yet ended, but we already have a huge list of what was hacked with help of AI. Next year I think is going to be even more "interesting". It seems that people have focused to use AI to harm or to do something negative, rather than turn AI into something that help.

[Lannakosa]

It is strange that AI is used to find a breach in security, contract or anywhere else to steal money, but projects themselves dont AI to find everything first and fix that. I suppose they have been doing that, but they never announce that they have found and fixed something.

Year 2026 hasnt yet ended, but we already have a huge list of what was hacked with help of AI. Next year I think is going to be even more "interesting". It seems that people have focused to use AI to harm or to do something negative, rather than turn AI into something that help.

Given recent events, it would make sense for companies to have their own dedicated security teams whose job would be to independently audit the code and identify as many potential vulnerabilities as possible. But there are probably several challenges involved, starting with finding genuinely qualified specialists who can identify these vulnerabilities, and ending with companies believing that spending money on this is not yet worthwhile and hoping that they won't be the ones affected. Of course, preventing a potential attack would be much cheaper than dealing with the consequences of one and putting potentially huge amounts of money at risk.

[asriloni]

I am just reading this too on X and am asking myself what's really happening in 2026, the attacks are  getting scaring by the day and the most scary part is we just don't know what would be next after another.

Thanks to AI, we all learned how crappy our existing code, infrastructure, and architecture are. AI has increased hackers' capabilities hundreds of times over, previously, they didn't have time to check "everything," but now they do. It's strange that those responsible for security seem to be reacting to problems rather than trying to prevent them. I hope this surge in hacks is temporary and stabilizes soon, otherwise it will be too costly for everyone - both businesses and consumers. It's good that the damage to Polymarket is minimal, it seems they will easily survive this.

Hunting the vulnerable code in thousands of lines is not something that could be done in a short time manually. They might able to use AI, but the efficientcy of AI itself is depending on what kind of model, and how the owner trained it.

Beside that as per the report, Polymarket seems lose 2.7m, which is still considerably big, though it's ez for them to cope it. But this obviously derailing user's trust to their service.

[CryptSafe]

It is funny how the AI that was developed for good use now turning into hackers work aid to perpetuate evil act's. Anyways there's a sayings that says "if something does not happen, nobody would make any move" now that hackers are now attacking both exchange, wallet app and casino's, they would take their security serious. From the recent happenings, it means majority of these organisations were reluctant to do normal routine checks on their security mechanism and they also failed to constantly update and upgrade the security of their platforms hence, the lapses resulting to their easy hacks. I hope other Crypto organisations are taking note and also strengthening their security apparatus.

[Ishicryptic]

I just do not understand the rate of hack around the space. Like, I want to know if they aren't caring about security or what?
Because as I know, the rate at which some platforms are being piped is becoming alarming.
I wasn't expecting this to happen to polymarket so suddenly because as I know, one needs to connect their wallet to make trades or gamble on that platform.

Sadly these news about popular exchanges, casinos and even a hardware wallet being hacked in this 2026 is alarming, it is almost becoming like a regular news to hear that a notable platform has been hacked, the increasing number of hacks is looking suspicious to me. Some of these hacks like in this case of Polymarket, is reported that it is from a third party outsourcing, and I wonder if these platforms like Polymarket doesn't do their due diligence before affiliating to a third party provider. Maybe AI aid to detect vulnerable loopholes is what is enabling these hackers to have breakthroughs and could be why there is this much increase, third party providers are mostly the weaklink for them to penetrate.

[knowngunman]

It's always third party comprises all the hack and data leaks that we have experienced in the recent time.

Even the hardware wallet data leak was all aided by third party service provider comprising the entire system.

What I think is that we should expect more to come, because third party service providers are most relied on by many cryptocurrency platforms like exchange or casinos, and there will always be insider backstaping the rest of the team by leaking backdoor to intruders.

And you know the bitter truth about this? These platforms simply can not operate independently without relying on third parties. They work with email providers, payment processer and relevant authorities to verify your documents. It's hard to not experience things like this because if one is affected, the entire system will be affected too. The bigger lesson to learn from this is to limit the amount of information we share with these platforms and never keep huge amount with them. What I don't understand about this incidents is how it is happening serialy jeopardising the entire industry.