Polymarket Resumes Trading After Session-Based Attack
Polymarket suspended trading for about an hour after an alleged attack let an attacker sell users’ positions and withdraw funds through active sessions, without passwords or seed phrases. Reports said compromised DebugBear monitoring code had been replaced with malicious code that users’ browsers treated as trusted. Polymarket said it would compensate affected users and referred the incident to UK law enforcement. The Polymarket attack highlights risks from compromised third-party scripts and may weigh on confidence in the prediction market platform.
Neutral
The incident is negative for Polymarket’s platform-specific reputation and could prompt affected users to withdraw funds or reduce activity. The temporary trading halt and promised compensation may limit immediate disruption, while the referral to UK law enforcement signals a formal response. Similar exchange and DeFi security incidents have often led to short-term caution, withdrawals and heightened scrutiny of platform safeguards. However, the report does not identify a broader crypto-market exploit or provide evidence of contagion to other assets, so a market-wide bearish impact is not established. In the short term, traders may monitor Polymarket’s compensation process, any confirmed losses and possible changes to session security. Longer term, the effect will depend on the scale of user losses and whether the platform can demonstrate that the vulnerability has been contained; stronger protections could restore confidence, while further disclosures or incidents could prolong reputational damage.