Polymarket halts trading after a compromised third-party provider drains user wallets through its website ยท updates https://pwn.watch/i/polymarket-frontend-third-party-provider-drain-oct-2026 On Oct 29 2026 Polymarket users reported their accounts being drained after using polymarket.com; one trader said he lost $800,000 and a friend $600,000 (user claims, not confirmed by Polymarket). At 18:05 UTC Polymarket put the exchange in cancel-only mode and paused relayer actions. At 18:37 UTC it said one of its third-party providers was compromised, that it had identified and fixed the issue on Polymarket.com, referred it to law enforcement, and that anyone impacted will be made whole; it then halted trading. At 19:00 UTC Polymarket said trading was fully back online and that it is fully reimbursing all affected traders, and at 19:05 UTC its status page marked the incident resolved. Polymarket has not named the provider or a loss total. The Block, citing Arkham data, reports a suspected attacker wallet holding about $2.65M, and CoinDesk cites DeFi Llama tracking about $2.7M in losses. A person familiar with the matter told CNBC the compromised provider was web-performance service DebugBear and that the case went to UK law enforcement; Hudson Rock told Decrypt a DebugBear-hosted script contained wallet-draining code. Polymarket's US platform was not affected, and no smart-contract exploit has been reported. It is the second time this year: in June, tampered outside-vendor code on the site drained about $3M. If you used the site on Oct 29, check your account for withdrawals you didn't make. en Thu, 29 Oct 2026 19:05:00 GMT Polymarket halts trading after a compromised third-party provider drains user wallets through its website: Polymarket's status page marks the incident resolved. https://pwn.watch/i/polymarket-frontend-third-party-provider-drain-oct-2026 https://pwn.watch/i/polymarket-frontend-third-party-provider-drain-oct-2026#2026-10-29-711311c8 Thu, 29 Oct 2026 19:05:00 GMT high <p><a href="https://status.polymarket.com/history/1">Source</a></p> Polymarket halts trading after a compromised third-party provider drains user wallets through its website: Polymarket says trading is fully back online and that it is fully reimbursing all affected traders. https://pwn.watch/i/polymarket-frontend-third-party-provider-drain-oct-2026 https://pwn.watch/i/polymarket-frontend-third-party-provider-drain-oct-2026#2026-10-29-adc71780 Thu, 29 Oct 2026 19:00:00 GMT high <p><a href="https://x.com/PolymarketTrade/status/2115881498477785393">Source</a></p> Polymarket halts trading after a compromised third-party provider drains user wallets through its website: Polymarket's status page moves to monitoring: a fix is out and trading will resume at approximately 3pm ET. https://pwn.watch/i/polymarket-frontend-third-party-provider-drain-oct-2026 https://pwn.watch/i/polymarket-frontend-third-party-provider-drain-oct-2026#2026-10-29-78f8bafe Thu, 29 Oct 2026 18:55:00 GMT high <p><a href="https://status.polymarket.com/history/1">Source</a></p> Polymarket halts trading after a compromised third-party provider drains user wallets through its website: Polymarket says one of its third-party providers was compromised, it has identified and fixed the issue on Polymarket.com, referred it to law enforcement, and anyone impacted will be made whole; trading stays halted while the platform is brought back online. https://pwn.watch/i/polymarket-frontend-third-party-provider-drain-oct-2026 https://pwn.watch/i/polymarket-frontend-third-party-provider-drain-oct-2026#2026-10-29-386ec4af Thu, 29 Oct 2026 18:37:00 GMT high <p><a href="https://status.polymarket.com/history/1">Source</a></p> Polymarket halts trading after a compromised third-party provider drains user wallets through its website: Polymarket's status page reports a major outage: the exchange is in cancel-only mode and relayer actions are paused while it investigates an incident. https://pwn.watch/i/polymarket-frontend-third-party-provider-drain-oct-2026 https://pwn.watch/i/polymarket-frontend-third-party-provider-drain-oct-2026#2026-10-29-eb32713c Thu, 29 Oct 2026 18:05:00 GMT high <p><a href="https://status.polymarket.com/history/1">Source</a></p> Polymarket halts trading after a compromised third-party provider drains user wallets through its website: A Polymarket trader posts that $800,000 was drained from his account, all his positions were sold and a friend lost $600,000, and warns users not to interact with the site. https://pwn.watch/i/polymarket-frontend-third-party-provider-drain-oct-2026 https://pwn.watch/i/polymarket-frontend-third-party-provider-drain-oct-2026#2026-10-29-c3993384 Thu, 29 Oct 2026 17:45:00 GMT high <p><a href="https://x.com/CarOnPolymarket/status/2115862718452298234">Source</a></p> Polymarket halts trading after a compromised third-party provider drains user wallets through its website: The Block reports, citing Arkham data, that a wallet identified as the suspected attacker holds about $2.65M in POL after USDC.e-to-POL swaps through Relay; CoinDesk says DeFi Llama tracks about $2.7M in losses. https://pwn.watch/i/polymarket-frontend-third-party-provider-drain-oct-2026 https://pwn.watch/i/polymarket-frontend-third-party-provider-drain-oct-2026#2026-10-29-91a7c1ce Thu, 29 Oct 2026 00:00:00 GMT high <p><a href="https://www.theblock.co/news/defi/2026-10-29-polymarket-exploit-2-5-million-cancel-only-mode-432158">Source</a></p> Polymarket halts trading after a compromised third-party provider drains user wallets through its website: Hudson Rock tells Decrypt a script loaded from DebugBear contains code that looks for a logged-in trading session, sells positions and transfers the assets, with the suspected attacker wallet hard-coded as fallback recipient. https://pwn.watch/i/polymarket-frontend-third-party-provider-drain-oct-2026 https://pwn.watch/i/polymarket-frontend-third-party-provider-drain-oct-2026#2026-10-29-becc63ff Thu, 29 Oct 2026 00:00:00 GMT high <p><a href="https://decrypt.co/382185/polymarket-pauses-trading-prediction-market-security-incident">Source</a></p> Polymarket halts trading after a compromised third-party provider drains user wallets through its website: A person familiar with the matter tells CNBC the issue stemmed from a hack of DebugBear and was referred to UK law enforcement; analytics firms told CNBC an account withdrew at least $2.7M across 710 wallets. Polymarket's US platform was not compromised. https://pwn.watch/i/polymarket-frontend-third-party-provider-drain-oct-2026 https://pwn.watch/i/polymarket-frontend-third-party-provider-drain-oct-2026#2026-10-29-bf699f56 Thu, 29 Oct 2026 00:00:00 GMT high <p><a href="https://www.cnbc.com/2026/10/29/polymarket-reports-outage-on-international-exchange-halts-trading.html">Source</a></p>