Polymarket Confirms $3.1M Hack, Promises Full Refunds as Investigation Widens
Polymarket disclosed a breach in which hackers stole $3.1 million in crypto after compromising a third-party vendor's website credentials. The prediction markets platform committed to refunding affected users while facing a separate regulatory investigation into marketing practices.
Written by CoinArticle’s AI Newsroom · from 2 cited sources. How we work
How the Breach Occurred
Polymarket said attackers infiltrated its website by compromising credentials from a third-party vendor, according to the company's disclosure. The breach allowed hackers to siphon millions in crypto from user accounts before the platform detected and contained the intrusion.
Refund Commitment and Scope
Polymarket committed to refunding all users affected by the theft. The company later updated the breach total to $3.1 million, according to reporting days after the initial refund pledge. The timeline and mechanics of the refunds remain unclear from available statements.
Regulatory Scrutiny
Beyond the breach response, Polymarket is facing investigation in connection with allegations of false or deceptive marketing practices, according to reports. The investigation's origin — whether from the FTC, SEC, or another regulator — was not specified in available disclosures. The timing of the marketing inquiry relative to the security breach is unclear.
Why It Matters
For Traders
Polymarket liquidity and order book depth may face near-term volatility as users withdraw or pause trading pending refund resolution.
For Investors
The combination of a $3.1M security lapse and ongoing regulatory investigation signals operational and compliance risk for platforms in unregulated prediction markets.
For Builders
Third-party vendor compromise as an attack vector underscores the need for prediction market infrastructure to harden API and vendor credential management.
This article is for information only and is not financial advice. Read the full disclaimer.
