Stolen again. His positions weren’t liquidated; someone else sold them all.
Polymarket trader Car @CarOnPolymarket posted that about $800,000 in assets in his account had been stolen and all his positions had been sold. His friend’s account was also hit, with about $600,000 stolen. Another user said they lost around $200,000. Those three accounts alone add up to about $1.6 million.
But the most alarming part isn’t the amount. One user said they received a withdrawal signature request on the official Polymarket website, even though they hadn’t initiated a withdrawal.
In other words, the danger doesn’t necessarily come from clicking a phishing link by mistake. The website may be official, the interface familiar, but the pop-up could have been injected by an attacker.
Users on X and in Polymarket’s Discord are now suspecting that the website’s frontend was attacked.
Polymarket trader Car @CarOnPolymarket posted that about $800,000 in assets in his account had been stolen and all his positions had been sold. His friend’s account was also hit, with about $600,000 stolen. Another user said they lost around $200,000. Those three accounts alone add up to about $1.6 million.
But the most alarming part isn’t the amount. One user said they received a withdrawal signature request on the official Polymarket website, even though they hadn’t initiated a withdrawal.
In other words, the danger doesn’t necessarily come from clicking a phishing link by mistake. The website may be official, the interface familiar, but the pop-up could have been injected by an attacker.
Users on X and in Polymarket’s Discord are now suspecting that the website’s frontend was attacked.
