Polymarket compromised through a third party provider

[Filicius]

I am just reading this too on X and am asking myself what's really happening in 2026, the attacks are  getting scaring by the day and the most scary part is we just don't know what would be next after another.

Couple this with the fact that today Binance seems to have reported a loss of $5.5 billion due to a hack, and indeed the outlook seems unflattering. It is to some extent logical that attackers would concentrate their efforts on the main providers within their category, in this case Polymarket or Binance (or Ledger! but a bit differently), but that these are not fully effective in protecting, given the means they have, is disturbing.

[Supreme Donvic]

I just do not understand the rate of hack around the space. Like, I want to know if they aren't caring about security or what?
Because as I know, the rate at which some platforms are being piped is becoming alarming.
I wasn't expecting this to happen to polymarket so suddenly because as I know, one needs to connect their wallet to make trades or gamble on that platform.

The whole thing is surprising to me, just last night I heard that binance have been hacked and right now I am seeing this News, what is really happening this is a question we should be asking in this forum, the high level of hack is becoming too much and I don't know if this platforms don't secure their self very well because I don't understand how hack will be happening from one platform to the other.
It looks like this hack will continue till the end of this year and I don't see anything being done, and I have not heard about anyone being caught for this hack that has been going on.
Just like you have said maybe this platforms are not caring about their security.

[KTChampions]

Thanks to AI, we all learned how crappy our existing code, infrastructure, and architecture are. AI has increased hackers' capabilities hundreds of times over, previously, they didn't have time to check "everything," but now they do. It's strange that those responsible for security seem to be reacting to problems rather than trying to prevent them. I hope this surge in hacks is temporary and stabilizes soon, otherwise it will be too costly for everyone - both businesses and consumers. It's good that the damage to Polymarket is minimal, it seems they will easily survive this.

It is strange that AI is used to find a breach in security, contract or anywhere else to steal money, but projects themselves dont AI to find everything first and fix that. I suppose they have been doing that, but they never announce that they have found and fixed something.

Year 2026 hasnt yet ended, but we already have a huge list of what was hacked with help of AI. Next year I think is going to be even more "interesting". It seems that people have focused to use AI to harm or to do something negative, rather than turn AI into something that help.

Here, the hack occurred through a third party, a website performance monitoring software provider. This, in my opinion, is the main problem with software: you can fully audit your own software, but not your external infrastructure, and given the level of integration, it's completely unclear where the next attack might come from.

~
Beside that as per the report, Polymarket seems lose 2.7m, which is still considerably big, though it's ez for them to cope it. But this obviously derailing user's trust to their service.

If I remember correctly, after Polymarket introduced fees, their daily income consistently exceeded a million dollars. It is clear that this is not pure profit and any loss is unpleasant (especially in terms of image), but financially this loss can be said to be trivial. It seems to me that the blow comes from the fact that users are now more seriously worried about the safety of their funds than from the actual hacking.

[Oshosondy]

Honestly, I thought it was going to be more money stolen from Polymarket, considering the huge amount of daily volume they manage thanks to it's big popularity on prediction markets.

How the hack happened is the reason only little amount of crypto were withdrawn by hackers on Polymarket. The hackers have access to the account of some of the Polymarket's user and transfer the coins on the account. Before transformers as many as possible coins from different users, this was known and further attack was prevented.

[arwin100]

I just do not understand the rate of hack around the space. Like, I want to know if they aren't caring about security or what?
Because as I know, the rate at which some platforms are being piped is becoming alarming.
I wasn't expecting this to happen to polymarket so suddenly because as I know, one needs to connect their wallet to make trades or gamble on that platform.

The whole thing is surprising to me, just last night I heard that binance have been hacked and right now I am seeing this News, what is really happening this is a question we should be asking in this forum, the high level of hack is becoming too much and I don't know if this platforms don't secure their self very well because I don't understand how hack will be happening from one platform to the other.
It looks like this hack will continue till the end of this year and I don't see anything being done, and I have not heard about anyone being caught for this hack that has been going on.
Just like you have said maybe this platforms are not caring about their security.

Got surprise on hacking issue happened on Binance, Particularly the amount taken to them. Now we heard another hacking incident happened and it leaves question if the users are still safe, if they trust to leave their funds on other big platforms.

Now hearing the third party provider of Polymarket experience this hacking issue. This make everything became more questionable.

About what you have said that you didn't hear someone got caught, then here's an example https://www.justice.gov/usao-dc/pr/gothferrari-sentenced-78-months-prison-role-massive-cryptocurrency-heist

So hopefully authorities caught more criminals like him.

[Call_Me_Guru]

Can someone please tell me when we will stop hearing bad news about crypto space, gambling and prediction markets? I am tired of this inadequacylies. October 2026 has been a terrible month for crypto-related services. For how long are these people cause compromision for their customers?

I don't want to believe it's a third-part at first but the investigation doesn't say differently. A United Kingdom-based third-party software vendor named DebugBear was at fault on this.

[GreatArkansas]

Honestly, I thought it was going to be more money stolen from Polymarket, considering the huge amount of daily volume they manage thanks to it's big popularity on prediction markets.

How the hack happened is the reason only little amount of crypto were withdrawn by hackers on Polymarket. The hackers have access to the account of some of the Polymarket's user and transfer the coins on the account. Before transformers as many as possible coins from different users, this was known and further attack was prevented.

Seems Binance saved Polymarket for this, hahaha, few hours after they got hacked, Binance happened, so most people right now are talking Binance instead.
That explains why the number looks "small" next to their volume. For me it's still the same lesson though, if you had balance sitting in the account when they got in, you were already in the pool. The halt just stopped it from getting bigger, temporary solution, which is common, it's kinda first aid for accidents like these.

[Supreme Donvic]

I just do not understand the rate of hack around the space. Like, I want to know if they aren't caring about security or what?
Because as I know, the rate at which some platforms are being piped is becoming alarming.
I wasn't expecting this to happen to polymarket so suddenly because as I know, one needs to connect their wallet to make trades or gamble on that platform.

The whole thing is surprising to me, just last night I heard that binance have been hacked and right now I am seeing this News, what is really happening this is a question we should be asking in this forum, the high level of hack is becoming too much and I don't know if this platforms don't secure their self very well because I don't understand how hack will be happening from one platform to the other.
It looks like this hack will continue till the end of this year and I don't see anything being done, and I have not heard about anyone being caught for this hack that has been going on.
Just like you have said maybe this platforms are not caring about their security.

Got surprise on hacking issue happened on Binance, Particularly the amount taken to them. Now we heard another hacking incident happened and it leaves question if the users are still safe, if they trust to leave their funds on other big platforms.

Now hearing the third party provider of Polymarket experience this hacking issue. This make everything became more questionable.

About what you have said that you didn't hear someone got caught, then here's an example https://www.justice.gov/usao-dc/pr/gothferrari-sentenced-78-months-prison-role-massive-cryptocurrency-heist

So hopefully authorities caught more criminals like him.

I don't think people are safe to keep their money in any platform anymore, be it wallet or exchange, wallet and exchange need to top up their security, they need to do something about their security so that this hack will not be happening anymore.

I don't think they can even catch them because I have seen a lot of hack that has happened in the past and till date they have not caught anyone so I don't think they will not catch anyone except they start digging deeper.

I am thinking a particular group of people are the ones involved in the casinos, exchange and wallet hacks happening this year.

[YOSHIE]

Polymarket compromised through a third party provider

Yes, you are right, we got information from the local exchange about the crypto-based Polymarket prediction market platform experiencing a security incident/hacking. We got information on the chronology of the Polymarket Incident, how the attack carried out by the intruder works, where the funds were stolen and also Polymarket's response and compensation.

From the incident that occurred on the Polymarket prediction market platform, remembering that we do not place large amounts of money on betting/gambling sites, anything could happen unexpectedly, Polymarket's streak in returning affected users' funds was a good decision, users did not feel the impact emotionally.

[DubemIfedigbo001]

It's always third party comprises all the hack and data leaks that we have experienced in the recent time.

Even the hardware wallet data leak was all aided by third party service provider comprising the entire system.

Attacks can come directly or indirectly, if the scammers see that your security is very tight, they'll find loopholes in those you partner with and have a swipe at your funds. Just like Binance had a very strong security and from what I read on X, they had to offer the devops engineer a job which led to his laptop being compromised and binance hot wallets drained.

What I think is that we should expect more to come, because third party service providers are most relied on by many cryptocurrency platforms like exchange or casinos, and there will always be insider backstaping the rest of the team by leaking backdoor to intruders.

Well, the year is not yet over, hacks happenalmost everyday, one impressive thing is how these hackers spend a lot of time to plan, lure vulnerable entities and pull out massive hits on organizations. I feel there is more to these hacks than they say, some of these third parties are actually accomplices.

[Leahized]

Just few days ago was predict.fun and today the 3rd party to polymarket is compromised. The prediction market code of operation had been revealed to the hackers, they know every vulnerable point concerning prediction market now. If I were other prediction market platform like Futuur and others, I'll simply recheck our security or upgrade to the latest version.

I have never made predictions in the polymarket. And is the security system of third-party suppliers very weak? Or are these incidents done intentionally? Because nowadays prediction markets are quite popular and everyone feels comfortable putting money in the polymarket. But recently these data hacking incidents have become serious. As a result, hackers can easily seize users money.

If hackers unexpectedly manage to find the code, then users are not very safe. However, your step is helpful but it makes sense to take the platform offline at this moment. And the bugs should be fixed quickly.

[GrigoryGaga]

As posted on their official X handle a short while ago, a third party provider was compromised which led to some traders losing funds, meanwhile all trading has been halted out of caution.
They've also promised to refund those affected.

We've identified & fixed an issue impacting our international platform, Polymarket⁠.com. One of our 3rd party providers was compromised, and we have referred this to relevant law enforcement.

Anyone who has been impacted will be made whole.

Out of an abundance of caution, we have temporarily halted trading & are working to bring the platform back online.

Source

Could this be connected to this "Black October" thing? So many places got hacked this week and most of them seem to get restored just as fast...

[KiaKia]

It now seems like every crypto platforms and casinos have their vulnerability waiting only for someone to find them first and it seems like the rest aren't learning from others that got hit.

If I am running a crypto platfrom or casino and this 2026 has been this tough as it is I would have changed alot of things on my platform too, find some bug finders to pay and adjust my security.

Online businesses have proven to be the worst of them all, everyone is just sitting on their hands to get hit first before they do something, this isn't the case of if it's working right don't fix it.

[sompitonov]

It now seems like every crypto platforms and casinos have their vulnerability waiting only for someone to find them first and it seems like the rest aren't learning from others that got hit.

If I am running a crypto platfrom or casino and this 2026 has been this tough as it is I would have changed alot of things on my platform too, find some bug finders to pay and adjust my security.

Online businesses have proven to be the worst of them all, everyone is just sitting on their hands to get hit first before they do something, this isn't the case of if it's working right don't fix it.

The fact is that whether it’s prediction markets or online gambling platforms, these systems handle vast sums of money and malicious actors are constantly watching, waiting for any opportunity to exploit. Add to this the use of AI for hacking, and it becomes clear that we are at a critical juncture, security protocols must be re-evaluated now, before it’s too late. Many people overlook this often becoming too complacent once they start seeing profits even though the situation is one that should, in fact, put them on high alert.

[hedgeh0g]

The fact is that whether it’s prediction markets or online gambling platforms, these systems handle vast sums of money and malicious actors are constantly watching, waiting for any opportunity to exploit. Add to this the use of AI for hacking, and it becomes clear that we are at a critical juncture, security protocols must be re-evaluated now, before it’s too late. Many people overlook this often becoming too complacent once they start seeing profits even though the situation is one that should, in fact, put them on high alert.

It is also important to understand the specific trends and patterns favored by attackers in particular, where their strikes originate. Even if you identify these methods and prepare accordingly, attackers will simply shift to exploiting different vulnerabilities, it is often impossible to secure every single point of entry at once. You might invest significant resources, yet still fall short of total protection ultimately, you can only reduce the number of vulnerabilities. That said, security spending must remain reasonable, it should not exceed a threshold beyond which further investment yields little additional benefit.

[suzanne5223]

Can someone please tell me when we will stop hearing bad news about crypto space, gambling and prediction markets? I am tired of this inadequacylies. October 2026 has been a terrible month for crypto-related services. For how long are these people cause compromision for their customers?

I don't want to believe it's a third-part at first but the investigation doesn't say differently. A United Kingdom-based third-party software vendor named DebugBear was at fault on this.

This is becoming a pattern because we're in the era of AI, which knows almost every major vulnerability, and issues like this will never end unless an adequate solution is provided. From what i see, most of this incident seems to involve a third-party provider or dev human error rather than the platform's core systems.
Meanwhile, Polymarket said they will do something for the affected users, and the fact that trading was halted quickly is better than some past cases. Although it doesn't change the underlying problem, when a platform relies on external services for authentication, monitoring, or infrastructure, it literally inherits their security weaknesses.

2026 has already shown how dangerous the supply-chain risk is through AI exposure.

[Pandu Geddon]

If hackers unexpectedly manage to find the code, then users are not very safe. However, your step is helpful but it makes sense to take the platform offline at this moment. And the bugs should be fixed quickly.

All platforms experiencing hacking issues will certainly immediately perform a temporary shutdown while waiting for security system repairs to be carried out. This incident involved users' funds, so the hacking case is quite serious. Polymarket providing full compensation to affected users is a form of responsibility that must indeed be done. But this case gives us a lesson once again not to store large amounts of money on any betting platform.

[Odusko]

I am just reading this too on X and am asking myself what's really happening in 2026, the attacks are  getting scaring by the day and the most scary part is we just don't know what would be next after another.

Couple this with the fact that today Binance seems to have reported a loss of $5.5 billion due to a hack, and indeed the outlook seems unflattering. It is to some extent logical that attackers would concentrate their efforts on the main providers within their category, in this case Polymarket or Binance (or Ledger! but a bit differently), but that these are not fully effective in protecting, given the means they have, is disturbing.

Alot is happening within the crypto service space and with in the last 1 months we have recorded close to 5-6 cases of hack's of Major cryptocurrency platforms like casino and exchange, deulbit, bitget and now Binance, this is not even the whole list of affected cryptocurrency platforms this season, this make us to wonder what the level of wave is and what contribute to the increase in this cases of hacks, what new tools do hackers now have to be able to carry out such widespread attacks on those platforms.

[Miles2006]

Yesterday, when the news of a prediction market hack happened, a user on this forum raised the question if this is the new area hackers are focusing on, and today there is a hack of Poly market and Binance exchanges. Tomorrow we don't know which one is going to be next. The internet space is scary in ghe5year 2026.

Too much credit is given to these hacker, there is no doubt they enjoy the stress they cause people, hackers gaining access to this field simply shows how weak these companies are in security aspect.
The internet space is indeed scary, every platform linked to the internet should at least make moves now because I was never expecting the Binance situation, surprising hackers are leading everyday.

[Exitoral]

When people look at a business online, most people think it is solely run by the company. But it doesn't really work like that. A lot of people are into this and they all work together. You can see a company and at the backend, you have like 8 different supplies that make that company to work. 8 external bodies I mean. Now the company in question can only secure what it can control. Although the rest 8 different companies supplies him with something doesn't mean the main company is responsible for their security. No. Everyone is responsible for their own security. You might think that just because it's decentralised it shouldn't have connection with the centralised. But for that seamless transaction to work, it has to communicate with the centralised. Example, the Blockchain records transactions and any address you give it records. Suppose you want to send funds to an address and at the point of sending a malicious code changes your address, it's not the fault of the Blockchain but the malicious code. Same thing with this polymarket hack.