NewsSignals AI analysis·X·Oct 29, 2026

Polymarket Confirms $2.65M Exploit Tied to Third-Party Provider

Grade Abearish AI signal$POL

Polymarket confirmed that a third-party provider was compromised in an incident linked to around $2.65 million in POL associated with a suspected attacker, according to Arkham data. The platform temporarily moved to cancel-only mode, pausing new trades during its investigation. Polymarket later said the issue had been fixed, the platform was back online, and the matter had been referred to law enforcement. Polymarket says all affected traders will be fully reimbursed. The incident places focus on third-party provider security, risk isolation, and the execution of reimbursements after the platform’s return to service.

Bullish strength: 42/100

Vulnerability fixed, platform resumes normal operations
Committed to fully compensating affected traders

Bearish strength: 58/100

Third-party vulnerability linked to $2.65M POL loss
Platform previously halted new trades and entered cancel-only mode

This is automated NewsSignals analysis of third-party reporting, not independent original reporting or investment advice. AI scores are not price predictions.

Read the original source ↗

← Browse more news analysis

Trade on MEXC

More recent source-attributed AI analysis in crypto.

Third-Party Provider Compromise Drains 700+ Users, With $2.7M Stolen

A third-party provider connected to Polymarket was compromised, with more than 700 users reportedly drained and $2.7 million stolen. Polymarket said impacted users will be made whole. The reported attacker address is 0x3F99139F1C5854bb628c2e576Aaf638e99dFfc18. Stolen funds were converted to $POL and distributed across addresses, including $1.4 million to 0xe4C4C39C1733e1C7c06B79f97ED442B68Df41EC6, $523,000 to 0xc91ee0574a14446DE200923729c349B9CAE19b60, and $393,000 to 0x5392587814Ce8c6af6789764f88e5e9AB0b9962C. A further $200,000 was reported as bridging to Ethereum, while $45,000 was identified on Ethereum at 0x74e940e4Eb470A9D8B78C5eb8919938041219897. Funds are still moving, keeping tracing, potential freezes, and compensation payouts in focus.

Suspected Polymarket Attacker Swaps $2.65M Into POL, Moves 28.64M Tokens

A wallet suspected of being tied to the Polymarket security incident swapped USDC.e and USDC into POL, at one point holding about $2.65 million in POL, according to Arkham data cited by The Block and Decrypt. Polygonscan data shows the address later transferred roughly 28.64 million POL in three transactions. Cybersecurity firm Hudson Rock said the address was hard-coded as a backup recipient in a script hosted by web performance monitoring service DebugBear that contained wallet-draining code. Polymarket previously said a third-party service provider had been compromised and that affected users would receive full reimbursement. Decrypt reported this was Polymarket's third security incident this year. Earlier incidents in May and June resulted in losses of about $700,000 and about $3 million, respectively. The on-chain consolidation and subsequent POL transfers keep attention on remaining funds, reimbursements, and third-party supply-chain security.

Users Report Possible Frontend Compromise and Unauthorized Asset Withdrawals

Polymarket users are reporting a possible frontend compromise, with allegations that assets are being withdrawn without permission, according to Discord posts cited by AggrNews. The reports are unverified. The immediate issues to monitor are whether an exploit is confirmed, the scope of any affected wallets, and whether the suspected issue is limited to Polymarket's frontend interface. No official clarification or confirmed loss figure was provided in the source.

From rivals to partners: Polygon and Solana team to bring stablecoin payments to banks

Polygon and Solana are partnering to expand stablecoin payments for businesses, connecting Solana-based transfers with Polygon's banking and payment infrastructure through a single integration. The agreement gives businesses access to bank funding, digital wallets, cross-chain transfers and bank payouts without merging the two blockchains, while payments firm Kira is among the first to use the integration. The partnership could boost stablecoin adoption by making it easier for banks and businesses to connect blockchain transactions with traditional financial systems.