Polymarket: about $2.7M hack

. Reported by public sources (confirmed by DeFiLlama). Amounts are as reported; the trace below shows what the chain says.

Polymarket restricted trading to cancel-only mode after users reported drained wallets, with the reported amount at $2.7 million. The Block reported a $2.65 million exploit and said a third-party provider was compromised, and Polymarket said it had resolved a security issue after a third-party breach. The earliest report is dated 2026-10-29 00:00 UTC, per DeFiLlama. No attacker address has been named, the networks are unknown, and the funds have not been traced. Whether any funds have been frozen or recovered is not established by the sources provided.

Amount: about $2.7M (reported).

What is known

Reported
By Crypto Briefing, crypto.news, @Poly_Status, @CarOnPolymarket and 6 more.
Confirmed
Confirmed by DeFiLlama. The amount is as reported.
Recorded on Kadena
Not yet.
Attacker address
None attributed by a source yet.
Frozen
No freeze read on chain.
Returned
No return of funds recorded here.
Trace coverage
Not traced yet: the trace starts when a source names an address.

Sources

Timeline

  1. Post cited by the coverage: @TheGreekTrader link
  2. Reported by Cointelegraph: Polymarket suspended trading amid reports of user funds being drained link
  3. Reported by The Block: Polymarket pauses trading after $2.65 million exploit, says third-party provider was compromised link
  4. Post cited by the coverage: @StarPlatinum_ link
  5. Post cited by the coverage: @Jeremybtc link
  6. Post cited by the coverage: @CarOnPolymarket link
  7. Post cited by the coverage: @Poly_Status link
  8. Reported by crypto.news: Polymarket restricts trading as users report drained wallets link
  9. Reported by Crypto Briefing: Polymarket resolves security issue after third-party breach link
  10. Detected from Crypto Briefing link
  11. Reported by DeFiLlama link

Read: How to trace stolen crypto, hop by hop.

Facts about addresses and transactions, never about people. Trace a wallet · Check an address · All live incidents