Prediction market giant Polymarket confirmed on Thursday that hackers stole funds from an unspecified number of users following a security breach at a third-party vendor.
How the Polymarket Breach Occurred
In an X post on Thursday, Polymarket revealed that a compromise at an external vendor enabled malicious actors to inject harmful code into its website, targeting “some users”. The platform stated that it has since “contained” the cyber attack, is actively contacting affected individuals, and will be “refunding them in full.”
While the company has taken steps to mitigate the damage, the exact technical details of how the breach occurred remain unclear.
When contacted for comment, Polymarket spokesperson Connor Brandi confirmed that user funds were indeed stolen during the incident. However, Brandi declined to provide further specifics and did not address detailed inquiries regarding the security failure.
Estimated Losses and Victim Impact
Phishing Campaign Targets Digital Assets
Coinciding with Polymarket’s public announcement, blockchain security firm PeckShield reported on X that a sophisticated phishing campaign had targeted the platform’s user base. PeckShield estimates that cybercriminals managed to siphon off approximately $3 million in cryptocurrency.
An independent blockchain analyst also reported similar financial losses, asserting that the stolen assets were drained from at least 11 high-value victims. Polymarket offers users the ability to deposit and receive payouts using various digital currencies.
var playerInstance_jwplayer_6a7a09189b148 = jwplayer( “jwplayer_6a7a09189b148” );
playerInstance_jwplayer_6a7a09189b148.setup({
playlist: “https://cdn.jwplayer.com/v2/media/lv0GaEwB”,
});
In the days leading up to the official confirmation, at least two people had already taken to social media to complain that their Polymarket balances had been mysteriously emptied.
A Week of Controversies for the Betting Platform
This security exploit caps off a highly turbulent week for the prediction market, which has repeatedly found itself in the spotlight for negative reasons. Just days ago, an investigative report exposed that Polymarket had commissioned online influencers to promote deceptive videos. These clips falsely claimed the creators had won massive payouts on bets that were entirely simulated. In response to the backlash, the firm pledged to conduct a thorough audit of its promotional and marketing content.