Polymarket Back Online After $2.65 Million Third-Party Exploit

Polymarket resumes trading after security incident

Polymarket, a prediction market platform where users bet on the results of real-world events, has returned to normal operations after a security exploit. The platform lost approximately $2.65 million in a matter of minutes on Thursday.

During the investigation, the exchange was placed in a "cancel-only" mode. This allowed users to cancel existing orders but prevented them from making new trades. The platform also paused its relayer, which is a service that helps process transactions on a blockchain.

Key facts about the exploit

• Approximately $2.65 million was stolen from the platform.
• The incident was caused by a compromised third-party service provider.
• Polymarket has promised to fully reimburse all traders who lost money.
• The platform is now back online and the security issue has been fixed.

Compromised third-party provider identified as the cause

Polymarket confirmed that the exploit was not a direct breach of its own internal systems but rather a compromise of a third-party provider. The platform stated it has found the root cause and implemented a fix to prevent further issues.

The company has referred the incident to law enforcement agencies for further investigation. Officials from Polymarket stated that they are working to ensure the safety of the platform following the breach.

Attacker moved millions in digital tokens

Data from the blockchain analysis firm Arkham revealed that a wallet address linked to the suspected attacker held about $2.65 million in POL tokens. POL is a digital asset used within certain blockchain ecosystems. The data showed the attacker swapped USDC.e, a type of stablecoin pegged to the U.S. dollar, for the POL tokens using a service called Relay.

After acquiring the funds, the attacker began moving the assets to several different digital wallet addresses. This is a common tactic used by hackers to try and hide the path of stolen money.

Traders to receive full reimbursement

Polymarket has announced that it will provide full refunds to any users affected by the exploit. While the platform was briefly limited to canceling orders, it has since resumed full trading capabilities for its users.

This event follows other security challenges for the platform. In the past, Polymarket dealt with a governance attack regarding a bet on international mineral deals and investigated suspicious fund movements involving its infrastructure on the Polygon network.

Sources

• The Block