🚨 Possible attack targeting Polymarket users: dangerous wallet signatures
Reports on social network X describe a possible attack: when connecting a wallet, users are allegedly prompted to sign a malicious request that could result in the loss of cryptocurrency.
⚠️ Important: so far, a new breach has not been independently confirmed. However, in June 2026, Polymarket was indeed targeted in an attack through a compromised third-party service. The damage was estimated at around $3 million. <Cite refs={["turn342353search0","turn342353news20"]}/>
🔐 What users should do: • Don’t connect your wallet or sign suspicious requests. • Don’t approve transactions whose purpose you don’t understand. • Don’t click suspicious links, and check the platform’s official announcements.
The key Web3 rule: connecting a wallet and signing a request are not the same thing. A signature may authorize an action whose consequences aren’t always obvious to the user.
Until a new incident is independently confirmed, it’s more sensible to treat this as a warning about a potential threat, not as a proven breach.
Reports on social network X describe a possible attack: when connecting a wallet, users are allegedly prompted to sign a malicious request that could result in the loss of cryptocurrency.
⚠️ Important: so far, a new breach has not been independently confirmed. However, in June 2026, Polymarket was indeed targeted in an attack through a compromised third-party service. The damage was estimated at around $3 million. <Cite refs={["turn342353search0","turn342353news20"]}/>
🔐 What users should do: • Don’t connect your wallet or sign suspicious requests. • Don’t approve transactions whose purpose you don’t understand. • Don’t click suspicious links, and check the platform’s official announcements.
The key Web3 rule: connecting a wallet and signing a request are not the same thing. A signature may authorize an action whose consequences aren’t always obvious to the user.
Until a new incident is independently confirmed, it’s more sensible to treat this as a warning about a potential threat, not as a proven breach.