Polymarket hack updated to $3.1 million days after the platform promised users full refunds

2 min readMake preferred on ShareShare this articleCopy linkX iconX (Twitter)LinkedInFacebookEmailMake preferred on SummaryShowHackers stole about $3.1 million in Polymarket’s PUSD token from 11 user wallets, moving the funds from Polygon to Ethereum, according to blockchain intelligence firm AMLBot.Polymarket said a compromised third-party vendor injected a malicious script into its frontend, and the platform has removed the dependency and pledged full refunds to affected PUSD holders.The phishing attack comes after a series of recent security incidents at Polymarket and amid reports that the prediction platform is under federal investigation over allegedly deceptive social media promotions.Blockchain intelligence firm AMLBot updated on X Saturday the amount hackers stole from 11 user wallet accounts on Polymarket to roughly $3.1 million in the prediction markets token PUSD. It said the assets were stolen from Polygon and immediately bridged to Ethereum and that it continues to monitor Polymarket accounts. Polymarket did not respond to a CoinDesk request for comment as of US morning hours on Saturday. Immediately after the attack was made public, Polymarket pledged full refunds to victims holding its native collateral and settlement token PUSD used for all trading on the decentralized prediction platform. "This morning we discovered a third party vendor had been compromised, injecting a malicious script into our frontend for some users," Polymarket said Thursday on X. "We've contained it and removed the affected dependency. We're contacting impacted users and refunding them in full." Blockchain security firm PeckShield reported via X on Thursday that hackers had deployed a phishing campaign targeting Polymarket users. It said the attacker or attackers had bridged the stolen funds initially estimated at roughly 1,893 ETH. On Thursday as well, Specter Analyst, another blockchain intelligence platform, said on Thursday that “It appears there may be a phishing attack targeting Polymarket users, with estimated losses of $2.94M so far.” One of the victims of the hack, Ash, on X wrote that his wallet had been hacked and had no idea why at the time. Ash also shared his and the attacker’s wallet addresses. Polymarket has suffered other security breaches recently. In March, blockchain investigator ZachXBT highlighted a suspected security breach. He said over $520,000 was reportedly drained from two smart contracts on the Polygon blockchain. Polymarket then said the funds were safe. In December, the platform confirmed a security incident on its Discord channel after users reported missing funds and suspicious login attempts. It blamed an unidentified third-party login provider for those account breaches. The news of the phishing attack follows reports that Polymarket is under federal investigation following a Wall Street Journal article into the prediction markets platform deceptive social media promotion of users boasting winnings. PolymarketHackLatest Crypto News 1Coinbase and OKX try to lure in Binance’s EU users after it failed to secure a MiCA license33 minutes ago2Binance founder CZ blames crypto's sour 2026 on mix of AI, global tension, 4-year cycle1 hour ago3Strategy's valuation has fallen below the value of its bitcoin holdings2 hours ago4Ripple CEO stays bullish on bitcoin but says Saylor's strategy has hurt crypto6 hours ago5Dogecoin and Hyperliquid's HYPE led weekly crypto losses as AI stocks lure buyers7 hours ago6Aave, Solana ecosystem tokens lead crypto rebound as bitcoin steadies near $60,00018 hours ago7U.S. House Democrat, who may soon run key committee, condemns crypto in 401(k)s19 hours ago8Former Ethereum Foundation leader warns of funding gap as governance shifts20 hours ago9Anti-trafficking group says Clarity Act's Section 604 could weaken accountability20 hours ago10Virtuals' Jansen Teng says AI agents are evolving into autonomous economic actors20 hours agoLatest Research Equities on Crypto Rails: A Platform ComparisonEquities on Crypto Rails: A Platform ComparisonUS equities on crypto rails: access is easy, on-chain composability is the real test. Only Binance and Backpack deliver both - and only Binance at scale. US equities on crypto rails: access is easy, on-chain composability is the real test. Only Binance and Backpack deliver both - and only Binance at scale. US equities on crypto rails: access is easy, on-chain composability is the real test. Only Binance and Backpack deliver both - and only Binance at scale.

Polymarket hack updated to $3.1 million days after the platform promised users full refunds

Key takeaways

More in business