# Polymarket Restricts Trading Following $2.6 Million Security Breach Platform halts operations after external service compromise leads to significant user fund losses. - **Source:** [CryptoPotato](https://brifing.si/source/bd22636b-ec8d-42a8-8cca-1937c50e0f6c) - **Published:** 2026-10-29 - **Topic:** [Finance](https://brifing.si/c/finance) - **Original article:** - **On Brifing:** https://brifing.si/s/e8173480-2ed8-471c-93aa-d81b3ec3c621 ## Trading Halt and Restrictions Polymarket suspended trading activities on Thursday following reports of unauthorized account access. The platform shifted its international exchange into a cancel-only mode, preventing new orders or trade executions. This emergency measure was implemented while the team investigated the scope of the incident and paused all Relayer activity to contain the potential damage. ## Quantifying the Financial Impact Blockchain data tracked by Arkham indicates that an attacker wallet holds approximately $2.65 million in POL tokens. On-chain investigators corroborate these figures, with some estimates reaching $2.7 million. Individual traders have reported significant losses, including one account holder claiming a loss of $800,000, stemming from hundreds of unauthorized transactions across the platform. ## External Service Vulnerability Identified The platform confirmed that the security breach originated from a compromised external service provider rather than its core infrastructure. By isolating the vulnerability to this third-party integration, the team was able to identify and fix the issue. This distinction is critical for understanding how the attacker bypassed standard security protocols during the incident. ## Mechanism of the Attack The attacker executed a series of USDC.e to POL swaps through the platform's Relay system to drain funds. This specific path allowed the unauthorized actor to convert stablecoins into the native token before moving them to a controlled wallet. The speed of these transactions suggests a highly automated exploitation of the compromised service. ## Platform Response and Reimbursement Polymarket has officially pledged to fully reimburse all affected traders for their losses. The company has already referred the matter to law enforcement agencies for further investigation. By committing to user restitution, the platform aims to maintain market confidence despite the significant disruption caused by the breach of their external service provider. ## Operational Recovery Status Following the identification and remediation of the vulnerability, the team focused on restoring normal platform operations. The transition from cancel-only mode to full functionality requires rigorous verification of the fixed external service. Users were advised to monitor their accounts as the platform gradually resumed standard trading capabilities after the security incident concluded. ## Third-Party Risk Management This incident highlights the inherent risks associated with integrating external service providers into decentralized financial platforms. Even when core infrastructure remains secure, dependencies on third-party relays or APIs create critical attack vectors. Future security audits must prioritize the isolation of these external components to prevent similar unauthorized access to user funds. ## Implications for Decentralized Exchanges The Polymarket breach serves as a stark reminder of the vulnerabilities present in complex blockchain-based trading systems. As platforms scale, the reliance on external relays and providers necessitates more robust monitoring and incident response protocols. Maintaining transparency with users regarding the nature of such compromises remains essential for long-term platform viability and trust. ## Sources covering this story - https://cryptopotato.com/polymarket-trading-disrupted-after-users-report-2-6m-in-losses/ — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._