Suspected Polymarket Attacker Moves 28.64M POL
A wallet suspected of being linked to the Polymarket attack converted USDC.e and USDC into POL, briefly holding about $2.65 million worth of the token. It later transferred roughly 28.64 million POL in three transactions. Cybersecurity firm Hudson Rock said the wallet address was hard-coded as a backup recipient in a wallet-stealing script hosted by DebugBear. Polymarket said a third-party service provider had been compromised and that affected users would be fully reimbursed. The POL transfers may draw short-term trader attention, but the article does not confirm that the tokens were sold.
Neutral
The incident is a security concern for Polymarket users, but the available details point to a compromise at a third-party service provider rather than a confirmed breach of Polymarket’s core systems. The platform’s commitment to fully reimburse affected users may help contain confidence risks. The suspected attacker’s movement of about 28.64 million POL could create short-term uncertainty and monitoring for potential selling, but a transfer alone does not establish that the tokens were sold or are headed for an exchange. Similar crypto theft incidents have sometimes caused brief volatility in assets linked to the affected project, especially when stolen funds move on-chain. In this case, the direct market effect appears limited and depends on whether the POL is sold and whether further evidence emerges about the incident. Over the longer term, user confidence will depend on the investigation, reimbursement, and improvements to third-party security. The report provides no evidence of a broad POL market or network disruption, supporting a neutral classification.