- Polymarket has restored trading on its international platform following a security breach traced to an external third-party service provider.
- Blockchain analytics platform Bubblemaps estimated that roughly $2.71 million was drained across 712 deposit wallets and redirected toward attacker-controlled addresses.
- Polymarket pledged full reimbursement for affected traders, though a formal timeline and claims procedure have not yet been announced.
Polymarket Resumes Trading After Third-Party Breach and Promises Full Trader Reimbursement
Decentralized prediction market platform Polymarket has fully restored trading operations on its international platform after temporarily halting activity due to a cybersecurity incident. The disruption occurred after the company discovered that one of its third-party service providers had been compromised. In response to the breach, Polymarket paused platform trading to isolate the issue, protect users, and remediate the vulnerability.
Following the pause, the official Polymarket Traders account confirmed that platform trading is now entirely back online. Alongside the resumption of market operations, the platform pledged that affected traders would receive complete financial compensation for their losses. However, Polymarket has not yet published an exact repayment timeline or outlined the specific procedural requirements for submitting reimbursement claims.
Bubblemaps Traces Millions in Stolen Assets Across Blockchain Networks
On-chain intelligence firm Bubblemaps published an analysis on October 29 tracking the flow of illicitly transferred funds from hundreds of victimized accounts. According to the investigation, assets from 712 deposit wallets were consolidated into a primary address associated with the attacker, accounting for approximately $2.71 million in transaction volume.
Bubblemaps reported that the compromised capital was subsequently converted into POL, the native token of the Polygon network, and dispersed across multiple secondary wallets. The on-chain tracking firm also noted cross-chain transfers redirecting portions of the stolen capital toward the Ethereum network. Polymarket has not yet independently verified or released its own confirmed accounting figures regarding the total financial loss.
Malicious Script Injected via Performance-Monitoring Provider
Security researchers evaluating the breach identified suspicious code tied to an external website performance-monitoring tool. These specialized software integrations are typically employed by web platforms to analyze page loading speeds, monitor uptime, and maintain overall interface performance.
According to researcher findings, the compromised monitoring service allowed bad actors to inject malicious code capable of hijacking active user trading sessions. Once established, this unauthorized access initiated automated transactions that drained cryptocurrency assets directly from user balances. The exact technical mechanics of the intrusion remain under active investigation as the Polymarket team prepares to publish a comprehensive post-mortem report.
Why This Matters
Third-party software integrations represent a major attack vector across Web3 and decentralized finance (DeFi) ecosystems. Even when underlying smart contracts remain secure, front-end dependencies—such as analytics scripts, monitoring tools, and content delivery networks—can introduce critical vulnerabilities that compromise active client sessions. For Polymarket, establishing transparency around its reimbursement process and completing a thorough security audit will be vital to retaining institutional and retail user trust across its prediction markets.
Frequently Asked Questions
Which Polymarket services were impacted by the security breach?
Polymarket stated that the security incident specifically affected its international platform. Trading was briefly suspended while engineers mitigated the breach and restored system integrity.
How much money was lost in the incident?
While Polymarket has not formally published its official loss total, on-chain analytics firm Bubblemaps estimated the attack drained approximately $2.71 million across 712 individual deposit wallets.
How can affected traders claim reimbursement?
Polymarket confirmed it will provide full compensation to affected traders. However, the company has not yet provided specific details regarding eligibility criteria, loss calculation methodology, or the schedule for fund distribution.
