Decentralized prediction platform Polymarket announced that its international platform had suffered a security breach, leading to a temporary suspension of trading operations after one of its third-party service providers was hacked. [1, 2]

Details of the observed financial flows

According to blockchain tracking and analysis data released by security platforms, the wallet address linked to the incident saw significant financial movements, including: [1, 2]

  • Stablecoins: Approximately $2.65 million in USDC and USDC.e were held before being transferred.

  • POL token: Approximately 28.64 million POL tokens were transferred across three separate transactions. [1, 2]

Technical exploit mechanism

Technical reports from cybersecurity firms such as Hudson Rock indicated that the vulnerability was not in the platform’s own smart contracts, but was caused by a malicious script injected through DebugBear, an external performance monitoring platform, to steal wallets. The malicious address was added as an alternative destination for receiving assets drained from users’ active trading sessions. [1, 2, 3]

Platform response and compensation

Polymarket officially confirmed that it had identified and fully resolved the issue, and referred the case to the relevant legal authorities in the United Kingdom, where the compromised service provider is based. [1, 2]

To strengthen the trading community’s trust, the platform announced its full commitment to fully compensating all users affected by this incident. [1, 2, 3]

Impact of the incident on price movements

The massive POL transfers raised questions among traders on social media about price movements. Experts explain that these flows fall under the transfer and conversion of seized assets, rather than genuine purchases driven by direct market demand, which explains why they did not have a positive impact on the token’s market value. [1, 2]. $POL


Disclaimer: This report is for informational and educational purposes only, based on available technical data, and does not constitute investment or financial advice.

$BTC