Polymarket Halts Trading After Third-Party Breach Drains User Wallets

Key points

• Trading on Polymarket’s international platform halted at 2 p.m. ET and resumed at 3 p.m. ET following a security incident.
• The breach originated from DebugBear, a web analytics tool, which confirmed an ongoing security incident on its platform.
• Polymarket stated it would fully reimburse all affected traders and has referred the matter to British law enforcement.
• The U.S.-based Polymarket platform was not affected by the breach.
• The incident occurred two days before the U.S. midterm elections, raising concerns about platform security during high-volume periods.

Background

Polymarket, valued at $21 billion after a $1 billion investment led by Donald Trump Jr. in September, processes approximately $200 million in daily trading activity. The platform has faced scrutiny over insider trading, with investigations into election-related bets ongoing. A similar third-party vendor breach occurred in June, where Polymarket refunded affected users after $3 million in collateral was stolen. The current incident follows a $102 million supply-chain breach at Ledger in October and a $400,000 attack on rival platform Predict.fun earlier this month.

How outlets are covering it

NBC News and CNBC reported that the breach stemmed from DebugBear, a third-party provider, and that Polymarket pledged to reimburse affected users. CNBC noted the U.S. platform was unaffected, while NBC highlighted the attack’s origin in the UK. Yahoo Finance reported initial user claims of $1.4 million in losses, though Polymarket did not confirm these figures. The Block reported $2.65 million in siphoned funds, citing blockchain analysis group Arkham, but Polymarket declined to comment on the amount. All sources agreed that trading resumed after nearly an hour and that the incident was referred to UK authorities.

Why it matters

The breach highlights vulnerabilities in third-party vendor security for major prediction market platforms, especially ahead of high-stakes events like the U.S. midterms. It raises concerns about the safety of user funds in decentralized finance platforms and the potential for supply-chain attacks to compromise large-scale trading systems.

What to watch

Polymarket will monitor for further security incidents and may update its vendor security protocols. Regulators may scrutinize prediction market platforms more closely, especially given ongoing disputes between U.S. states and the Trump administration over regulation. Users may face increased scrutiny on their accounts, and Polymarket may implement additional safeguards to prevent future breaches.