Polymarket compromised through a third party provider

[Lida93]

~...~

I think in the history books, we are going to remember 2026, especially the las quateur of the year for a long time to come.
There are cyberattacks everywhere.
What can these organizations affected learn from it and what can the ones not affect learn from it.
In my estimation, these look like a very planned and coordinated attack on these platforms.
I wonder what the users trust rating would look like after the affected organizations bounce back.

It's definitely going to be a year we can't forget in hurry and the year can't be mentioned without these hack incidents surface in mind.
What other lessons are there to learn except that the rest organisations be at alert and tighten their security systems and improve layers.
Yes, it's obvious, it's a coordinated attacks and which just can't be from some random hackers. If these platforms could bounce back from this setback then it should a remarkable feat for them and trusting them shouldn't be a difficult thing, because not every organisation gets back to operation after getting such unexpected huge financial loss.

[DanWalker]

They've also promised to refund those affected.

I am not sure whether one can truly evade responsibility by placing all blame on third party provider and vendor.

I understand that they have promised to provide compensation, that is fair enough. But such misappropriation of over $2.65 million and draining of account belonging to more than 700 user cannot be dismissed as minor error!

Moreover similar kind of security breach and scandal occurred just last month too?
So, is it our responsibility to repeatedly check for these third party vulnerabilities?
Or is it from their platform?

[PauloKoner]

They've also promised to refund those affected.

I am not sure whether one can truly evade responsibility by placing all blame on third party provider and vendor.

I understand that they have promised to provide compensation, that is fair enough. But such misappropriation of over $2.65 million and draining of account belonging to more than 700 user cannot be dismissed as minor error!

Moreover similar kind of security breach and scandal occurred just last month too?
So, is it our responsibility to repeatedly check for these third party vulnerabilities?
Or is it from their platform?

I think the platform is responsible for its own providers because users have no way to audit them. A user can only choose what to keep on the site and I'd say it's safest to withdraw whatever you don't need for playing.
And if a similar breach happened a month ago the question is what exactly was fixed back then..

[Lida93]

It's not only in 2026, attackers like all of these happens in any year, it something that is not strange that's why platforms invest strongly in cyber security and any other ways to beef up their security.
One thing I like about this one in particular and from what I am reading here is that Polymarket said anyone that was affected will be attended to, the attackers aren't strange but there would be understanding if those affected get this reassurance that Polymarket gave theirs.

Can you specifically narrow it to any year this manner of cyber attacks has occurred in and around the cryptocurrency ecosystem and everything around cryptocurrency? In the last quarter of this year we have had series of attacks that can't be measured to attacks and hacks in any other year in crypto history.

It's applaudable to learn that polymarket have announced to refunds it's customers of their losses but then it's still nothing unique since there has being other incidents where the platform ensured customers losses never went un-refunded. You can call it the right thing that was  to be done.

[Orpichukwu]

The spike in security breaches is becoming alarming with some people attributing that to AI while others remain at a loss as to what might be the cause. Just this year we have seen several exchanges,  casinos, crypto wallets and now prediction sites.  If Polymarket is not even spared, that means Web3 as a whole may be up for a huge surprise in the near future. How these hackers manages to evade being caught is another thing that surprises me despite moving large somes of money.

If where all the fingers are pointing are actually true that they are the ones responsible for all the hacking happening, then we can all tell why those hackers have the boldness in doing what they are doing: they are living in a restricted country and won’t even bother trying to leave the country for anything because they know outside their walls they can be apprehended anytime.

[Sandra_hakeem]

So far, the total loss of assets has not been quantified by polymarket, but I would not be surprised if we were talking about millions of dollars lost tho those hackers...

Yep, after doing a quick search on Google, the hacker got millions of dollars from Polymarket. According to this article, around $2.6M got drained from Polymarket. The article said that Arkham data shows that the suspected attacker's wallet holds $2.65M in POL.

For the most part of 2026, it has always been a case of one hack or another. I can't help but wonder how a web analytics and monitoring tool got compromised without their notice. They got only one job to do right, but they still messed it up. $2.6 million is incredibly small compared to other hacks this year alone, but it's still people's money that needs to be paid.

An unbiased question would be, does DebugBear gets to make the reimbursements of the lost funds or is it on the house? FWIW, Poly market is worth ×1000 more than that.

[Hispo]

So far, the total loss of assets has not been quantified by polymarket, but I would not be surprised if we were talking about millions of dollars lost tho those hackers...

Yep, after doing a quick search on Google, the hacker got millions of dollars from Polymarket. According to this article, around $2.6M got drained from Polymarket. The article said that Arkham data shows that the suspected attacker's wallet holds $2.65M in POL.

For the most part of 2026, it has always been a case of one hack or another. I can't help but wonder how a web analytics and monitoring tool got compromised without their notice.

So far this has been a pretty bad year when it comes to cyber-security, self-cusrody has been struck with the attack on Coldcard and Ledger, there have been theft of funds from several services around the internet. Now we are seeing centralized exchanges and prediction markets being targeted by North Korean hackers.

We are unfortunately witnessing history in the world of cryptocurrency, but this is rather negative history, thing which never supposed to happen to begin with.

This will definitely make many people to lose faith in this ecosystem and will move their money back to traditional finances.

[Kelward]

The spike in security breaches is becoming alarming with some people attributing that to AI while others remain at a loss as to what might be the cause. Just this year we have seen several exchanges,  casinos, crypto wallets and now prediction sites.  If Polymarket is not even spared, that means Web3 as a whole may be up for a huge surprise in the near future. How these hackers manages to evade being caught is another thing that surprises me despite moving large somes of money.

If where all the fingers are pointing are actually true that they are the ones responsible for all the hacking happening, then we can all tell why those hackers have the boldness in doing what they are doing: they are living in a restricted country and won’t even bother trying to leave the country for anything because they know outside their walls they can be apprehended anytime.

I'm very worried for crypto platforms because of these high levels of hacks, it seems that what these casinos, exchanges can do is to cover their breach and move on because so far I've never heard about any arrests or investigations that leads to successfully apprehension of these hackers. If there are concrete proofs of the country where these criminals are hiding let it be boldly stated so we can atleast be sure of the country that is protecting these criminals. News of hacks are no longer alarming, what the public is interested now is how much was stolen and how much have been recovered so far, these hackers should be stopped by all means because they are rubbishing the security of these platforms.

[Sandra_hakeem]

So far, the total loss of assets has not been quantified by polymarket, but I would not be surprised if we were talking about millions of dollars lost tho those hackers...

Yep, after doing a quick search on Google, the hacker got millions of dollars from Polymarket. According to this article, around $2.6M got drained from Polymarket. The article said that Arkham data shows that the suspected attacker's wallet holds $2.65M in POL.

For the most part of 2026, it has always been a case of one hack or another. I can't help but wonder how a web analytics and monitoring tool got compromised without their notice.

So far this has been a pretty bad year when it comes to cyber-security, self-cusrody has been struck with the attack on Coldcard and Ledger, there have been theft of funds from several services around the internet. Now we are seeing centralized exchanges and prediction markets being targeted by North Korean hackers.

Perhaps this is an orchestrated attack on Bitcoin just to prove a point? These platforms keep telling us they're investigating, but what the outcome is at the end of the day is not publicized so what's going on?

We are unfortunately witnessing history in the world of cryptocurrency, but this is rather negative history, thing which never supposed to happen to begin with.

Cold part of this is that it's not stopping any time soon.

This will definitely make many people to lose faith in this ecosystem and will move their money back to traditional finances.

Honestly. I really thought about this and wanted to share it, but for a second, I thought it'd be a thread-derailing discussion so I gave up. It has already sent trigger warnings to a vast majority that wanted to adopt, just as it has increased the fear of uncertainty to those who were already in it. They've long moved on with quotes like--- 'Yeah, at least my money is safe in the bank. Not a piece of device that can easily be compromised ".

[Die_empty]

I'm very worried for crypto platforms because of these high levels of hacks, it seems that what these casinos, exchanges can do is to cover their breach and move on because so far I've never heard about any arrests or investigations that leads to successfully apprehension of these hackers. If there are concrete proofs of the country where these criminals are hiding let it be boldly stated so we can atleast be sure of the country that is protecting these criminals. News of hacks are no longer alarming, what the public is interested now is how much was stolen and how much have been recovered so far, these hackers should be stopped by all means because they are rubbishing the security of these platforms.

Artificial intelligence has brought another dimension of threat in almost all sectors of the world. The strategy that was used to hack of Binance has not been disclosed, but the firm said this pattern was new. So we would have to expect more threats until the industry devises a strong security system to repel these attacks.

Tracking and recovering stolen funds in the crypto industry is complicated. It would also require another effort to unmask those behind these attacks. It is common now to blame North Korean hackers for most of these hacks. There has not been clear evidence that this is true, since investigations are using patterns and flow analysis to make conclusions. North Korea is a secluded nation, so it is highly unlikely that those behind these hacks would be held responsible.

Luckily, Binance said they have recovered close to 90% of the lost funds. This recovery could help investigators determine who is behind this massive hack.

[asriloni]

~
Beside that as per the report, Polymarket seems lose 2.7m, which is still considerably big, though it's ez for them to cope it. But this obviously derailing user's trust to their service.

If I remember correctly, after Polymarket introduced fees, their daily income consistently exceeded a million dollars. It is clear that this is not pure profit and any loss is unpleasant (especially in terms of image), but financially this loss can be said to be trivial. It seems to me that the blow comes from the fact that users are now more seriously worried about the safety of their funds than from the actual hacking.

It has always been the main concern after an incident happened to the platform security. Let's say the platform might get a small incident that could be easily covered by their money7, but there's no guarantee they can keep their code to always free from the vulnerability.

Let's take a look at binance, i believe none never expected a platform with billions TVL, very high budged of security gets breached like that. So you're right user puts more attention to the safety of their budget because Poly can always be targeted.

[Hispo]

Honestly. I really thought about this and wanted to share it, but for a second, I thought it'd be a thread-derailing discussion so I gave up. It has already sent trigger warnings to a vast majority that wanted to adopt, just as it has increased the fear of uncertainty to those who were already in it. They've long moved on with quotes like--- 'Yeah, at least my money is safe in the bank. Not a piece of device that can easily be compromised ".

I have also seen several comments on Twitter from people claiming they are done with Bitcoin and decentralization because of these lastest hacks on Polymarkets, vulnerabilities on Ledger and Coldcard, and the final nail in the coffin seems to be this lastest heist against Binance.

Some people here on the forum have even suggested the idea to get their exposition to Bitcoin through ETFs, basically paper Bitcoin, instead of holding the real thing themselves.

Self-custody is important, but it is not everyone, one needs to have much responsibility on the management of private keys.

[Somegory]

~
Beside that as per the report, Polymarket seems lose 2.7m, which is still considerably big, though it's ez for them to cope it. But this obviously derailing user's trust to their service.

If I remember correctly, after Polymarket introduced fees, their daily income consistently exceeded a million dollars. It is clear that this is not pure profit and any loss is unpleasant (especially in terms of image), but financially this loss can be said to be trivial. It seems to me that the blow comes from the fact that users are now more seriously worried about the safety of their funds than from the actual hacking.

It has always been the main concern after an incident happened to the platform security. Let's say the platform might get a small incident that could be easily covered by their money7, but there's no guarantee they can keep their code to always free from the vulnerability.

Let's take a look at binance, i believe none never expected a platform with billions TVL, very high budged of security gets breached like that. So you're right user puts more attention to the safety of their budget because Poly can always be targeted.

This is very true, if every other online exchanges are weak in terms of protecting users fund, Binance exchange isn't one of them, I read that they always update their codes, servers and security from time to time.

Yet they still get hacked, I guess nothing is untouchable in this space, no crypto exchanges and no prediction markets are safe from hackers completely.

Everyone should get prepared, it's better to start planning the same thing that Binance did because if customers don't get their money back they will stop using the platform.

[Localhostspeed]

I have also seen several comments on Twitter from people claiming they are done with Bitcoin and decentralization because of these lastest hacks on Polymarkets, vulnerabilities on Ledger and Coldcard, and the final nail in the coffin seems to be this lastest heist against Binance.

Some people here on the forum have even suggested the idea to get their exposition to Bitcoin through ETFs, basically paper Bitcoin, instead of holding the real thing themselves.

Self-custody is important, but it is not everyone, one needs to have much responsibility on the management of private keys.

This is exactly what the hackers want them to think and they are doing that exactly. For years now, the voice of crypto is don't use centralized exchanges and don't keep your money on them. The hackers then proved to them that it's not the best way to keep coins and at the same time prove centralized are bad too and all of sudden, they want to buy ETF. These ETF they are buying hold some amounts of Bitcoin too, by the time the hackers understand their ways of storage, they will take everything away from them.

Hackers has proven one thing and the message they telling us is what crypto has been building are not security tight enough. It's now left for developers to strengthen the things they build. As they are building, they should also strengthen the security of the platforms they build. This is an era of AI that if you miss one thing, your will lose everything to another person by a single click from another hacker.

[Gost ms]

I have also seen several comments on Twitter from people claiming they are done with Bitcoin and decentralization because of these lastest hacks on Polymarkets, vulnerabilities on Ledger and Coldcard, and the final nail in the coffin seems to be this lastest heist against Binance.

Some people here on the forum have even suggested the idea to get their exposition to Bitcoin through ETFs, basically paper Bitcoin, instead of holding the real thing themselves.

Self-custody is important, but it is not everyone, one needs to have much responsibility on the management of private keys.

This is exactly what the hackers want them to think and they are doing that exactly. For years now, the voice of crypto is don't use centralized exchanges and don't keep your money on them. The hackers then proved to them that it's not the best way to keep coins and at the same time prove centralized are bad too and all of sudden, they want to buy ETF. These ETF they are buying hold some amounts of Bitcoin too, by the time the hackers understand their ways of storage, they will take everything away from them.

Hackers has proven one thing and the message they telling us is what crypto has been building are not security tight enough. It's now left for developers to strengthen the things they build. As they are building, they should also strengthen the security of the platforms they build. This is an era of AI that if you miss one thing, your will lose everything to another person by a single click from another hacker.

Decentralized cryptos are secure and cryptos that have a blockchain network are almost impossible to hack. But the mistake we all make is when choosing wallets and exchanges. We choose wallets and exchanges that are centralized and have a high chance of being hacked. Bitcoin is currently impossible to hack, so yes, at one time we saw a 51 attack on Bitcoin, at that time there were not many miners etc. that's why we saw it, but now it is never possible to do it.

We always need to choose the right wallet and exchange. It is best not to use centralized exchanges and wallets. Always use decentralized wallets. For example, electurm wallet

[Ishicryptic]

~
Beside that as per the report, Polymarket seems lose 2.7m, which is still considerably big, though it's ez for them to cope it. But this obviously derailing user's trust to their service.

If I remember correctly, after Polymarket introduced fees, their daily income consistently exceeded a million dollars. It is clear that this is not pure profit and any loss is unpleasant (especially in terms of image), but financially this loss can be said to be trivial. It seems to me that the blow comes from the fact that users are now more seriously worried about the safety of their funds than from the actual hacking.

It has always been the main concern after an incident happened to the platform security. Let's say the platform might get a small incident that could be easily covered by their money7, but there's no guarantee they can keep their code to always free from the vulnerability.

Let's take a look at binance, i believe none never expected a platform with billions TVL, very high budged of security gets breached like that. So you're right user puts more attention to the safety of their budget because Poly can always be targeted.

Ofcourse traders and gamblers major concern on a hacked platform where they deposited their funds is the safety of their funds because they are not part owners or part of the security team, if they have an assurance that their funds are safe they will feel reassured. Polymarket has enough reseave to cushion the effect of the third party breach so it's in their best interest to assure traders that their funds are safe to mantain their reputation as a capable prediction site. This is the same thing that happened in Binance, despite their hack which was the biggest so far they still assured their customers that their funds are safe. Despite these assurances the hacks are still a major problem for crypto related platforms.

[eisen33]

I am not sure whether one can truly evade responsibility by placing all blame on third party provider and vendor.

I understand that they have promised to provide compensation, that is fair enough. But such misappropriation of over $2.65 million and draining of account belonging to more than 700 user cannot be dismissed as minor error!

Moreover similar kind of security breach and scandal occurred just last month too?
So, is it our responsibility to repeatedly check for these third party vulnerabilities?
Or is it from their platform?

In one of the latest news reports, I saw a figure of $3.9 million mentioned as the amount stolen in the hack. For a platform of this size, that kind of loss is hardly significant. I think that's exactly why they aren't paying much attention to the number of users who were hacked. They're only concerned about the amount of money stolen, and since it's relatively small, they don't seem to consider it a major incident either.

[PVequalNRT]

In one of the latest news reports, I saw a figure of $3.9 million mentioned as the amount stolen in the hack. For a platform of this size, that kind of loss is hardly significant. I think that's exactly why they aren't paying much attention to the number of users who were hacked. They're only concerned about the amount of money stolen, and since it's relatively small, they don't seem to consider it a major incident either.

The Binance exchange hack buried this news and even them did not make an update about it. This left me wondering if the third-party are going to reimburse the affected the users or Polymarket will pay back the damages or both parties will come to an agreement to pay back people they owed right now. I think this is one of the reason many people are calling the prediction market to be suspended as the election are coming soon.

Maybe Polymarket didn't learn from the API tricks of centralized exchanges. They lost millions and even users data because of how they allows third party to their platform, this is a similar one from a decentralized perspective.

[Webetcoins]

It's always third party comprises all the hack and data leaks that we have experienced in the recent time.

Even the hardware wallet data leak was all aided by third party service provider comprising the entire system.

What I think is that we should expect more to come, because third party service providers are most relied on by many cryptocurrency platforms like exchange or casinos, and there will always be insider backstaping the rest of the team by leaking backdoor to intruders.

Your expectation is really shocking me. We could assume about fixing this third party service provider vulnerability as early as possible? Because, it is not those services are the direct victims but we the endusers are. Yeah, third party liquidity providers and game providers are very common in many crypto platforms and if there would be any security lapse still exists, then we can expect more bad news from similar platforms for sure.

If this situation continues then I guess only standalone business model based platforms alone will succeed. But, running a real time crypto business without need of any third party provider is practically not feasible but not completely impossible.

[Sandra_hakeem]

Honestly. I really thought about this and wanted to share it, but for a second, I thought it'd be a thread-derailing discussion so I gave up. It has already sent trigger warnings to a vast majority that wanted to adopt, just as it has increased the fear of uncertainty to those who were already in it. They've long moved on with quotes like--- 'Yeah, at least my money is safe in the bank. Not a piece of device that can easily be compromised ".

I have also seen several comments on Twitter from people claiming they are done with Bitcoin and decentralization because of these lastest hacks on Polymarkets, vulnerabilities on Ledger and Coldcard, and the final nail in the coffin seems to be this lastest heist against Binance.

I think it's normal to see the entire ecosystem panic. It's only a matter of time for everything to die down when they get to find out, especially since Binance have reimbursed at least 90% of the lost funds to the affected people ( For the liquid assets), and the remaining 10% is currently under the process. I think new source information says they have increased it by 5%, making it 95 in total. That's a rapid way to clear off almost $7 billion in debt.

Some people here on the forum have even suggested the idea to get their exposition to Bitcoin through ETFs, basically paper Bitcoin, instead of holding the real thing themselves.

It's a good idea. I'd recommend it to someone who doesn't understand how important the security of their keys can save them any day, anytime.

Self-custody is important, but it is not everyone, one needs to have much responsibility on the management of private keys.

Edit: Polymarket has also initiated a plan to reimburse every the affected trader. It's unlikely that they have anything below $500 million as an emergency reserve/ insurance funds to absorb losses (IDK, just guessing) because that has not been made public so again, It all boils down to the panic. _{I went a little off topic with the Binance news, but the panic and FUD kind of connects it.}