Polymarket Hit by Massive Hack
Crypto prediction market Polymarket suffered a massive security breach on October 29, 2026, with 995 accounts drained of approximately $2.65 million.
The attack occurred rapidly between 17:05 UTC and 18:05 UTC, with the hacker's wallet accumulating funds in stages. At 17:25 UTC, the wallet held $412K, which jumped to $2.02M by 17:50 UTC and reached approximately $2.68M by 18:05 UTC.
The two largest individual losses detected were $341K and $307K. In total, the attacker amassed 28.6M POL tokens, likely converting the stolen funds to avoid freezing.
Attack Method
The breach appears to have been caused by a hack of a third-party JavaScript component embedded in the Polymarket website. This is similar to a previous attack in June 2026, when hackers compromised a third-party vendor, resulting in $2.94 million stolen from at least 11 wallets.
We've identified & fixed an issue impacting our international platform, Polymarket.com. One of our 3rd party providers was compromised, and we have referred this to relevant law enforcement. Anyone who has been impacted will be made whole.
User Impact
Users affected by the hack have taken to social media to report their losses. One trader claimed to have lost $800,000 while a friend reportedly lost another $600K. Polymarket has temporarily halted trading as they work to bring the platform back online and ensure all affected users are compensated.
Related
