Polymarket Trading Halted Following Security Breach
On Thursday, Polymarket, a prediction markets platform, temporarily discontinued trading on its international site due to a security incident involving a compromise of third-party software.
Incident Overview
Concerns arose when several users reported on Polymarket’s Discord channel that their cryptocurrency wallets had been emptied. While the company did not verify these claims, they did assure the public in a post on X that “anyone who has been impacted will be made whole.”
Subsequently, Polymarket confirmed its commitment to reimburse all affected traders, stating, “We’ll make this right and are fully reimbursing all affected traders.”
Nature of the Breach
Investigations indicated that the attack may have originated from the United Kingdom. The company has since alerted British law enforcement regarding the breach. Reports suggest that hackers accessed user funds through DebugBear, a third-party web analytics tool, as revealed by an anonymous source familiar with the situation.
DebugBear acknowledged that it was dealing with an “ongoing security incident” around 2 p.m. ET Thursday, coinciding with the timing of Polymarket’s trading halt.
Financial Impact
As reported by the crypto news outlet The Block, approximately $2.65 million in cryptocurrencies may have been siphoned from users’ wallets during the incident, according to data from blockchain analysis group Arkham. However, a Polymarket representative declined to comment on this figure or the specifics of the breach.
Trading Resumption and Platform Status
Polymarket has since restored trading activities, resuming operations by 3 p.m. ET after nearly an hour offline. The U.S.-based version of the platform reportedly remained unaffected by the issue.
Wider Implications and Security Concerns
This incident highlights a growing trend where malicious actors compromise third-party vendors to access larger platforms. The event not only resulted in financial loss for users but also underscores the vulnerabilities associated with relying on external service providers.
Recently valued at $21 billion following a $1 billion investment led by Donald Trump Jr., Polymarket currently facilitates daily trading activities worth around $200 million. The company is part of an ongoing regulatory debate in the U.S. regarding prediction market betting, facing scrutiny alongside rival Kalshi.
Additionally, Polymarket is actively investigating reports of suspicious bets amid major political events, including the Israeli elections and the upcoming U.S. midterms, as mentioned by Shana Bautista, the company’s head of global intelligence and investigations.
In light of this breach, Polymarket’s proactive measures to ensure the security of trading and user funds will be essential as they navigate these challenges.
