Polymarket Restores Trading After Third-Party Security Breach

Prediction market firm Polymarket took its international exchange offline briefly on Thursday (Oct. 29) as it dealt with an issue related to a third-party provider, the company said in a post on X.

    Get the Full Story

    Complete the form to unlock this article and enjoy unlimited free access to all PYMNTS content — no additional logins required.

    Subscribe to our daily newsletter, PYMNTS Today.

    By completing this form, you agree to receive marketing communications from PYMNTS and to the sharing of your information with our sponsor, if applicable, in accordance with our Privacy Policy and Terms and Conditions.

    “We’ve identified [and] fixed an issue impacting our international platform, Polymarket.com,” the company said in the post by its Polymarket Traders account. “One of our [third-party] providers was compromised, and we have referred this to relevant law enforcement.”

    “Anyone who has been impacted will be made whole,” Polymarket said.

    Polymarket said it had temporarily halted trading, out of an abundance of caution, as was working to bring the platform back online.

    In a reply to its post, Polymarket said 21 minutes later that it was coming back online.

    Six minutes after that, Polymarket said in another reply that trading was fully back online.

    “We’ll make this right and are fully reimbursing all affected traders,” Polymarket said in the reply.

    We’d love to be your preferred source for news.

    Please add us to your preferred sources list so our news, data and interviews show up in your feed. Thanks!

    CNBC reported Thursday that an unknown number of users of Polymarket’s international exchange had funds stolen from their account. Polymarket’s U.S. platform was not affected.

    Publicly available data showed that an account on Polymarket withdrew a total of at least $2.7 million from 710 other wallets, the report said, citing analytics firms Betting Intelligence and Polysights.

    Bloomberg reported Thursday that a Polymarket spokesperson said the company had reported the incident to law enforcement in the United Kingdom.

    This report also put the losses from the incident at $2.7 million, citing blockchain analytics platform Bubblemaps.

    It was reported in June that Polymarket had suffered a major security exploit that resulted in the theft of $3.1 million in PUSD tokens.

    The breach, which affected 11 user wallets, was traced to a compromised third-party vendor that injected a malicious script into the platform’s frontend.

    Polymarket promised to provide full refunds to all victims holding its native PUSD collateral, according to the June report.

    It was reported in September that Polymarket had struggled with compliance failures, legal challenges and software issues as it tried to boost its growth. A Polymarket spokesman said in that report that the platform is committed to maintaining accurate, fair and transparent markets and cooperating with regulators and law enforcement.