started · updated
Polymarket halts trading following third-party security breach
Polymarket, the largest cryptocurrency prediction market, temporarily suspended trading on its international platform on October 29, 2026, following a security breach involving a third-party provider. The incident, which occurred around 18:05 UTC, forced the exchange into a cancel-only mode and led to the suspension of relayer actions to prevent further unauthorized transactions.
Reports indicate the breach originated from a compromised third-party service, with some sources identifying the UK-based web performance monitoring firm DebugBear as the affected vendor. The attack appears to have involved a malicious JavaScript injection into the platform's frontend rather than an exploit of its core smart contracts. This allowed attackers to intercept user interactions and drain assets.
Blockchain analytics firms, including Arkham and Bubblemaps, have traced approximately $2.65 million to $2.7 million in stolen funds, much of which was converted into the Polygon native token, POL. Reports suggest hundreds of user wallets were affected. Polymarket has stated that it has resolved the issue, referred the matter to law enforcement in the United Kingdom, and pledged to fully reimburse all impacted traders.
Entities
Arkham · Bubblemaps · Car · Conor Grogan · DebugBear · Polygon · Polymarket · StarPlatinum
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 3 SOURCES] A suspicious wallet contains approximately $2.65 million in POL. www.criptotendencias.com · decrypt.co · u.today
- [● 9 SOURCES] Polymarket restricted trading to cancel-only mode on October 29, 2026. crypto.news · www.criptotendencias.com · cryptobriefing.com · www.tronweekly.com · cointelegraph.com · +3 more
- [● 5 SOURCES] A trader named Car reported losing $800,000. crypto.news · www.tronweekly.com · decrypt.co · exame.com · u.today
- [● 2 SOURCES] The suspicious wallet address is 0x3F99139F1C5854bb628c2e576Aaf638e99dFfc18. www.criptotendencias.com · decrypt.co
- [● 4 SOURCES] The incident affected the Predictions Trading API (CLOB). crypto.news · www.tronweekly.com · cointelegraph.com · cryptocompass.com
- [● 2 SOURCES] A user named StarPlatinum alleged losses of $2.68 million. crypto.news · u.today
- [● 4 SOURCES] The incident occurred at 18:05 UTC on October 29, 2026. crypto.news · www.tronweekly.com · u.today · cryptocompass.com
- [● 7 SOURCES] Polymarket paused relayer actions during its investigation. crypto.news · www.criptotendencias.com · cryptobriefing.com · www.tronweekly.com · bilbaohiria.com · +1 more