Polymarket Confirms Hack, Refunds Users After Third-Party Breach
Polymarket confirmed that hackers stole funds from users due to a compromise at a third-party vendor, and the company is refunding victims. Security firm PeckShield reported that approximately $3 million in cryptocurrency was stolen from over 11 victims.
Prediction market platform Polymarket has confirmed that its website was compromised, leading to the theft of user funds. In a post on X on Thursday, the company stated that a third-party vendor breach allowed hackers to inject malicious code into the site for some users. The incident has been contained and affected victims are being contacted and refunded in full, according to the company.
The exact nature of the breach remains unclear. Polymarket spokesperson Connor Brandi confirmed to TechCrunch that funds were stolen but declined to provide further details or answer specific questions. Around the time of Polymarket's announcement, blockchain monitoring firm PeckShield reported a phishing campaign targeting Polymarket users. PeckShield estimated that hackers stole roughly $3 million in cryptocurrency. A blockchain analyst also reported similar losses, claiming that more than 11 victims were affected.
Polymarket allows users to receive payouts in cryptocurrency. In recent days, at least two individuals on social media reported having their funds stolen from the platform.
This hacking incident adds to a difficult week for Polymarket. On Sunday, an investigation revealed that the company had paid online creators to post deceptive videos showing fake winning bets. In response, Polymarket said it would audit its promotional content.
