On October 29, 2026, Polymarket experienced a security breach after a third-party provider's compromise led to wallet theft for its international platform users This article explores polymarket experienced security. . Traders reported missing funds, unexpected withdrawals, and positions being closed without permission.
The company temporarily halted trading, announced it had resolved the issue, and committed to reimbursing affected users. Early descriptions indicated an authentication provider, but current reports link this incident to DebugBear, a website performance monitoring service.
The malicious script targeted active trading sessions, checking account information and attempting to use the platform’s trading tools to move assets. One route attempted to transfer position tokens directly, while another tried to sell positions before moving available funds. According to CNBC’s reporting, analysis from Betting Intelligence and Polysights linked at least $2.7 million in withdrawals to 710 wallets.
CNBC reported that users with less than $10,000 lost would see their funds restored by October 30, while larger claims would need a release form. The reimbursement promise addresses financial losses but the exact exposure window and initial method used to compromise the provider remain unresolved. Users are advised to close potentially exposed tabs, review recent orders and wallet transactions through trusted channels, and save transaction hashes for support claims.
Hudson Rock recommends reviewing sessions and permissions with official support, avoiding unsolicited recovery links, and never sharing a seed phrase.
