API
< Back to all clusters
[TECHNOLOGY] · United Kingdom, United States · 19 sources

started · updated

Polymarket halts trading following third-party security breach

Polymarket, the largest cryptocurrency prediction market, temporarily suspended trading on its international platform on October 29, 2026, following a security breach involving a third-party provider. The incident, which occurred around 18:05 UTC, forced the exchange into a cancel-only mode and led to the suspension of relayer actions to prevent further unauthorized transactions.

Reports indicate the breach originated from a compromised third-party service, with some sources identifying the UK-based web performance monitoring firm DebugBear as the affected vendor. The attack appears to have involved a malicious JavaScript injection into the platform's frontend rather than an exploit of its core smart contracts. This allowed attackers to intercept user interactions and drain assets.

Blockchain analytics firms, including Arkham and Bubblemaps, have traced approximately $2.65 million to $2.7 million in stolen funds, much of which was converted into the Polygon native token, POL. Reports suggest hundreds of user wallets were affected. Polymarket has stated that it has resolved the issue, referred the matter to law enforcement in the United Kingdom, and pledged to fully reimburse all impacted traders.

Entities

Arkham · Bubblemaps · Car · Conor Grogan · DebugBear · Polygon · Polymarket · StarPlatinum

Claims

What the coverage asserts, and how many sources carry each claim.

Sources