GoKawiilPolymarket halts trading after third-party breach drains $2.5M in crypto
Polymarket suspended trading Thursday after a compromised third-party provider distributed malicious JavaScript that drained user funds, with security researchers tracing about $2.5 million in POL tokens to a suspected attacker wallet. The platform briefly went into cancel-only mode, fixed the issue within roughly an hour, and resumed trading, saying all affected users will be reimbursed. The company has referred the incident to law enforcement but has not disclosed how many users were affected or the exact amount stolen.
GoKawiil's interpretation of the reporting above, not reported fact.
The episode highlights how prediction markets and crypto exchanges remain vulnerable through third-party software dependencies rather than their own core systems, a recurring weak point across the industry. Polymarket's quick halt and pledge to reimburse traders could help preserve user trust, though the lack of disclosed scope may raise questions about transparency. The traced wallet activity suggests investigators may be able to follow the stolen funds, which could aid law enforcement efforts.
- Polymarket halted and restored trading within about an hour after a third-party breach.
- Roughly $2.5 million in POL tokens were traced to a suspected attacker wallet, per Hudson Rock and BleepingComputer.
- Polymarket pledged full reimbursement to affected users and referred the case to law enforcement.
Ledger Nano X Hardware Wallet — Incidents like Polymarket's script breach highlight why keeping crypto assets in a hardware wallet rather than exposed to browser-based scripts matters. Ledger Nano X keeps your private keys offline, away from compromised third-party web services. It's a practical step toward protecting your funds from supply-chain style attacks like this one.
See Ledger Nano X Hardware Wallet on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-10-29
Published there as: “Polymarket halts trading after crypto-draining script breach, $2.5M traced”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.