Polymarket halts trading after a compromised third-party provider drains user wallets through its website
Polymarket (polymarket.com)
On Oct 29 2026 Polymarket users reported their accounts being drained after using polymarket.com; one trader said he lost $800,000 and a friend $600,000 (user claims, not confirmed by Polymarket). At 18:05 UTC Polymarket put the exchange in cancel-only mode and paused relayer actions. At 18:37 UTC it said one of its third-party providers was compromised, that it had identified and fixed the issue on Polymarket.com, referred it to law enforcement, and that anyone impacted will be made whole; it then halted trading. At 19:00 UTC Polymarket said trading was fully back online and that it is fully reimbursing all affected traders, and at 19:05 UTC its status page marked the incident resolved. Polymarket has not named the provider or a loss total, and no smart-contract exploit has been reported. It is the second time this year: in June, tampered outside-vendor code on the site drained about $3M. If you used the site on Oct 29, check your account for withdrawals you didn't make.
Why this severity: User wallets drained via the website; user-reported losses of $1.4M+ unconfirmed; Polymarket says impacted users will be made whole
- Started
- Oct 29, 2026
Affected
- polymarket.com (international platform) users who connected or signed on Oct 29 2026
Fixed in
No fixed release yet
Timeline6
A Polymarket trader posts that $800,000 was drained from his account, all his positions were sold and a friend lost $600,000, and warns users not to interact with the site.
Polymarket's status page reports a major outage: the exchange is in cancel-only mode and relayer actions are paused while it investigates an incident.
Polymarket says one of its third-party providers was compromised, it has identified and fixed the issue on Polymarket.com, referred it to law enforcement, and anyone impacted will be made whole; trading stays halted while the platform is brought back online.
Polymarket's status page moves to monitoring: a fix is out and trading will resume at approximately 3pm ET.
Polymarket says trading is fully back online and that it is fully reimbursing all affected traders.
Polymarket's status page marks the incident resolved.
Advisories1
News & write-ups3
Posts3
If you are a Polymarket user, lock down your account. I just got drained $800,000 Other accounts are also affected. Friend got drained $600k Please be careful dont interact with the site
⚠️ Polymarket.com: We've found the cause and are working on a fix. We have identified and fixed the issue impacting our international platform, t.co/P7otbsyEWB. One of our third party providers was compromised, and we have referred this to relevant law enforcement.
Trading is now fully back online. We’ll make this right and are fully reimbursing all affected traders.
Get an email when a new major security incident drops. No spam, unsubscribe any time.
