Polymarket Confirms a Hacker Attack: Approximately Three Million Dollars in Cryptocurrency Stolen from Users
Polymarket has confirmed that it suffered a cybersecurity attack that resulted in the theft of approximately three million dollars in cryptocurrency from some users. According to the company's communication, the incident was caused by the compromise of an external supplier, which allowed attackers to insert malicious code into the website interface.
The blockchain analysis company PeckShield estimated that the total losses amount to about three million dollars and that the affected users would be more than 11. Polymarket stated that it has identified and removed the compromised component and is already working to contact the affected individuals to fully reimburse the stolen amounts. However, the company did not disclose the name of the affected supplier or the exact number of victims.
Spokesperson Connor Brandi also confirmed that the attack indeed resulted in the theft of funds, but did not provide further details on the incident. Transaction analysis conducted by blockchain expert Specter shows that the cryptocurrencies were withdrawn from wallets containing PUSD, the stablecoin used by the platform. Subsequently, the assets were transferred from the Polygon network to Ethereum and converted into approximately 1,893 ETH, a procedure often used to make it more difficult to trace the stolen funds.
Additional Details on the Hacking Incident at Polymarket
According to available information, Polymarket's main infrastructure and smart contracts were not compromised. Instead, the attack exploited a supply chain breach, altering the code distributed by an external supplier and serving the malicious script through the site's frontend.
This incident comes after other issues faced by the platform over the course of the year. In May, approximately 520,000 dollars were stolen from two smart contracts on the Polygon network, an event that Polymarket attributed to the compromise of an old private key linked to an internal operating wallet.
The week was further complicated by an investigation by the Wall Street Journal, which reported that the company allegedly paid some online creators to publish videos with fake bets and winnings. In response, Polymarket announced a review of its promotional content.
Simultaneously, regulatory difficulties continue. In recent months, the platform has faced restrictions in several countries and has had to deal with further controversies regarding its internal governance management. Despite this, Polymarket is still recording good overall growth.