Polymarket to Reimburse Users $3 Million Following Hack

Prediction platform Polymarket has promised to fully reimburse users affected by a recent hack. The estimated amount of stolen funds is approximately $3 million.

The attackers compromised a third-party contractor and injected malicious code into the platform's web interface. The code loaded only for a subset of users and, once malicious transactions were signed, allowed funds to be drained from their crypto wallets.

Polymarket stated that the issue has been resolved, the compromised dependency has been removed, and all affected users will receive full compensation.

According to preliminary information, the attack affected fewer than 15 accounts. The stolen funds in pUSD tokens were bridged from the Polygon network to Ethereum, where they were swapped for approximately 1,893 ETH.

The company also emphasized that Polymarket's smart contracts were not breached. The incident was limited exclusively to the web interface, meaning users do not need to create new accounts or migrate their assets. The company has not disclosed the name of the contractor whose compromise made the attack possible.