Polymarket Resumes International Trading Following Third-Party Vendor Security Breach
Prediction platform restores operations after hackers drained approximately 2.7 million dollars from user accounts.
1Trading Suspension and Restoration
Polymarket paused its flagship international platform following a security breach that drained funds from user wallets. Trading resumed after several hours of investigation into the incident. The company confirmed that the breach originated from a third-party vendor based in the United Kingdom, rather than the prediction market's own website infrastructure.
2Financial Impact and Affected Users
Blockchain analytics firm Bubblemaps reported that approximately 700 users were affected by the unauthorized activity. Estimates indicate that roughly 2.7 million dollars in cryptocurrency was stolen during the incident. While Polymarket declined to confirm specific figures regarding the total losses, the company officially committed to providing full refunds to all impacted traders.
3Platform Segregation and US Operations
The security incident was strictly limited to the international platform and did not affect Polymarket US. The company maintains two distinct operational structures, with the US entity functioning as a federally regulated financial exchange. Conversely, the international platform operates as a cryptocurrency-based service currently banned in the United States and several other jurisdictions.
4Recurring Vulnerability Patterns
This event marks the second time the platform has suffered a similar security failure. In June, a nearly identical vendor-compromise attack occurred, resulting in the loss of nearly 3 million dollars from at least 11 user wallets. Both incidents involved the same method of deploying an injected frontend script to bypass security measures.
5Regulatory and Law Enforcement Involvement
Polymarket has formally notified law enforcement authorities in the United Kingdom regarding the vendor breach. The company is currently cooperating with investigators to address the security failure. Despite the public nature of the complaints on X, the platform has remained cautious about disclosing further technical details regarding the specific vendor involved.
6Broader Cryptocurrency Market Context
The Polymarket breach occurred amidst a wider period of instability within the cryptocurrency sector. Just hours before the trading halt, separate reports indicated that over 2 billion dollars in cryptocurrency was drained from Binance wallets within a 40-minute window. These events highlight the persistent risks associated with centralized and third-party service dependencies.
7Frontend Script Injection Risks
The attack vector utilized in both the June incident and the recent breach relies on injecting malicious scripts into the frontend. This mechanism allows attackers to intercept user data or execute unauthorized transactions directly from the browser environment. Such vulnerabilities underscore the critical need for rigorous supply chain security and vendor auditing protocols.
8Future Security and Operational Outlook
Moving forward, the platform faces increased scrutiny regarding its reliance on external vendors for critical operations. The commitment to refund affected users serves as a primary step in maintaining market confidence. Stakeholders must monitor whether the company will implement stricter security controls to prevent future frontend script injections and vendor-side compromises.