Back to all incidents

Polymarket

polymarket.com
DEVELOPING

Prediction market platform Polymarket temporarily suspended trading on Thursday after hackers compromised a third-party service to distribute cryptocurrency-draining JavaScript, with approximately $2.5 million in assets traced to a suspected attac...

Observable Status DEVELOPING
Industry / Sector Technology & Commercial
Incident Classification Network Intrusion & Data Exfiltration
Attributed Threat Actor Unattributed / Unknown
Affected Population Scope Under Audit
First Seen 2026-10-29
Last Updated 2026-10-30
Authentication Credentials
OPEN WEIGHTS TELEMETRY • DETERMINISTIC CONFIDENCE

Confidence & Source Corroboration

46% CONFIDENCE
1. Primary Authority INDEPENDENT VERIFICATION Base weight: 32%
2. Evidence Specificity +7% Domain & Scope Telemetry
3. Corroboration Curve +7% 2 independent domains
4. Timeline & Staleness +0% 2 milestones logged
Corroborated Source Domains:
bleepingcomputer.com therecord.media

Technical Forensic Briefing

Incident Overview

Polymarket, within its operating sector, has been subject to a cybersecurity incident. Ground-truth telemetry indicates the threat activity is currently unconfirmed or under forensic attribution.

Prediction market platform Polymarket temporarily suspended trading on Thursday after hackers compromised a third-party service to distribute cryptocurrency-draining JavaScript, with approximately $2.5 million in assets traced to a suspected attac...

Compromised Assets & Data Scope

The specific volume of affected customer or organizational records remains under active forensic investigation. Primary affected online infrastructure and perimeter domains include polymarket.com.

Specific classes of compromised records, credentials, or proprietary information continue to be audited through ongoing forensic investigation.

Authoritative Directives & Vendor Disclosures

  • Continuous Telemetry Monitoring: Formal statutory regulatory filings (SEC Form 8-K, State AG portals) and sovereign agency advisories (CISA, NCSC) are continuously monitored via automated ingestion pipeline.

Milestone Timeline (2 events logged)

2026-10-29 21:47 UTC
INDEPENDENT VERIFICATION

Polymarket halts trading after crypto-draining script breach, $2.5M traced

2026-10-30 11:33 UTC
Media Pickup INDEPENDENT VERIFICATION

Press Coverage: Polymarket confirms cyberattack on third-party provider after outages

Have updated information or a new verifiable source?

This incident record is a flat Markdown file tracked in Git. Propose an update or add a milestone via Pull Request.

Propose Update via GitHub