Polymarket Resumes Trading After $2.6M Security Breach
Polymarket resumed trading on its international platform on October 29 after temporarily restricting activity following reports of unauthorised account activity and losses. During the investigation, the exchange operated in cancel-only mode and paused Relayer activity. The platform said a compromised third-party provider caused the incident, not its core infrastructure; it has not publicly named the provider. Researchers linked malicious code to a script served through analytics provider DebugBear, but that connection has not been confirmed by Polymarket.
Polymarket said it fixed the vulnerability, referred the matter to law enforcement and would fully reimburse affected traders. The platform has not disclosed the number of affected accounts or confirmed total losses. Blockchain estimates range from about $2.19 million to $2.65 million, while some reports put the figure near $2.7 million. Arkham tracked a wallet believed to be linked to the attacker holding about $2.65 million in POL after swaps from USDC.e through Relay; one trader also claimed losses of about $800,000. These figures remain unverified.
The Polymarket security incident renews scrutiny of the prediction market’s operational safeguards, following earlier breaches involving a vendor and an internal wallet. For traders, the resumption of trading and reimbursement pledge may help restore confidence, but confirmed loss figures and any further disruption remain key points to watch.
Neutral
The incident is negative for confidence in Polymarket’s operational security, but the available reports do not establish a direct price catalyst for POL or USDC.e. POL appeared in estimates of the attacker-linked wallet’s holdings, while USDC.e was described as an asset swapped in the transactions; neither fact alone indicates a change in either token’s fundamentals. In the short term, traders may react to verified loss figures, further service interruptions or evidence of broader exposure, which could cause temporary volatility. The platform’s return to trading and reimbursement pledge may limit spillover. Over the longer term, any lasting price effect would depend on whether the breach prompts wider concerns about the relevant token networks or their liquidity; the summaries provide no evidence of that. The expected direct impact on the mentioned cryptocurrencies is therefore neutral.