Polymarket hacked twice in three months
Polymarket was hacked twice in three months. A third-party login issue remains unresolved, and the dates and scale of the damage of each incident have not been confirmed.
Key facts
- Affected organisation
- Polymarket
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- Not confirmed
- Cause / method
- Not confirmed
- Location
- United States
Timeline
- It emerged that Polymarket had been hacked twice in three months and that a third-party login issue remained unresolved.
1 related reports
Other incidents at Polymarket
Polymarket users lose about $2.7 million in third-party breach
Impact: About $2.7 million in cryptoassets stolen from 726 wallets
On 29 October, malicious JavaScript distributed through a breach of an external service provider stole users' cryptoassets on Polymarket. The malicious code, linked to a website performance monitoring tool, hijacked login sessions to siphon funds, with about $2.7 million confirmed stolen directly from 726 wallets. Polymarket temporarily suspended trading before resuming it and said it would pay about $3.9 million in total compensation for direct losses and the trading suspension.
Related reports: 15 · last report →Polymarket hack estimated to have drained about $3 million in crypto assets
Impact: Estimated theft of about $3 million in crypto assets
Crypto assets were stolen from Polymarket in a hack, and an on-chain analyst estimated the losses at about $3 million. Polymarket said it had blocked and removed a malicious bug after a third-party supplier was hacked, and decided to fully reimburse affected users.
Related reports: 2 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.