Polymarket’s international site attacked via third-party vendor; about $2.65 million stolen | Around 03:00 Beijing time on October 30
It wasn’t the market that ran into trouble in the middle of the night—it was the platform itself. Early this morning, Polymarket’s international site briefly switched to cancel-only mode: all new orders were halted, and relayer activity was also paused. The platform later said it had identified and fixed the cause: a third-party vendor had been compromised. The matter was also referred to law enforcement, and the platform promised to fully compensate affected users.
The figures need some context: the roughly $2.65 million refers to POL in wallets Arkham traced on-chain to suspected attackers (transferred after USDC.e was converted to POL via Relay). It is not an official total for the amount stolen, as CoinDesk also noted that the official total could not yet be confirmed at the time. So don’t treat $2.65 million as the final bill—it’s simply the on-chain figure that can currently be verified.
The second point worth noting is that this isn’t the first time. CoinDesk reported that in June this year, Polymarket also suffered a breach at a third-party vendor, with about $3 million taken. In both cases, the platform’s own contracts weren’t exploited; the weak link was an external vendor. For users, the lesson is straightforward: when you keep money in a prediction market, the risks don’t come only from the direction you bet on, but also from third parties you can’t even see.
My view in a nutshell: this incident is only behind us once the compensation promise is fulfilled and the issue doesn’t recur after service is restored. Otherwise, “third party” will become a catch-all explanation every time something goes wrong.
Risk reminder: The situation is still developing. Refer to the platform’s status page for the total losses, the scope of affected users, and the restoration timeline. Don’t adjust your positions or move funds based on a single report.
Do you have positions on Polymarket’s international site? Are you pulling out for now to wait and see, or waiting to see whether compensation comes through?
#Polymarket #预测市场 #安全事件 #Third-party risk
It wasn’t the market that ran into trouble in the middle of the night—it was the platform itself. Early this morning, Polymarket’s international site briefly switched to cancel-only mode: all new orders were halted, and relayer activity was also paused. The platform later said it had identified and fixed the cause: a third-party vendor had been compromised. The matter was also referred to law enforcement, and the platform promised to fully compensate affected users.
The figures need some context: the roughly $2.65 million refers to POL in wallets Arkham traced on-chain to suspected attackers (transferred after USDC.e was converted to POL via Relay). It is not an official total for the amount stolen, as CoinDesk also noted that the official total could not yet be confirmed at the time. So don’t treat $2.65 million as the final bill—it’s simply the on-chain figure that can currently be verified.
The second point worth noting is that this isn’t the first time. CoinDesk reported that in June this year, Polymarket also suffered a breach at a third-party vendor, with about $3 million taken. In both cases, the platform’s own contracts weren’t exploited; the weak link was an external vendor. For users, the lesson is straightforward: when you keep money in a prediction market, the risks don’t come only from the direction you bet on, but also from third parties you can’t even see.
My view in a nutshell: this incident is only behind us once the compensation promise is fulfilled and the issue doesn’t recur after service is restored. Otherwise, “third party” will become a catch-all explanation every time something goes wrong.
Risk reminder: The situation is still developing. Refer to the platform’s status page for the total losses, the scope of affected users, and the restoration timeline. Don’t adjust your positions or move funds based on a single report.
Do you have positions on Polymarket’s international site? Are you pulling out for now to wait and see, or waiting to see whether compensation comes through?
#Polymarket #预测市场 #安全事件 #Third-party risk
