Polymarket Traders
@PolymarketTrade
Trading is now fully back online. We’ll make this right and are fully reimbursing all affected traders.
Debugbear
Security incidents tagged Debugbear. Newest first.
1 Debugbear incident in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 1
- Patched
- 1
- Days without an incident
- 0
- Longest quiet run: 0 days
- Patched
Polymarket halts trading after a compromised third-party provider drains user wallets through its website
On Oct 29 2026 Polymarket users reported their accounts being drained after using polymarket.com; one trader said he lost $800,000 and a friend $600,000 (user claims, not confirmed by Polymarket). At 18:05 UTC Polymarket put the exchange in cancel-only mode and paused relayer actions. At 18:37 UTC it said one of its third-party providers was compromised, that it had identified and fixed the issue on Polymarket.com, referred it to law enforcement, and that anyone impacted will be made whole; it then halted trading. At 19:00 UTC Polymarket said trading was fully back online and that it is fully reimbursing all affected traders, and at 19:05 UTC its status page marked the incident resolved. Polymarket has not named the provider or a loss total. The Block, citing Arkham data, reports a suspected attacker wallet holding about $2.65M, and CoinDesk cites DeFi Llama tracking about $2.7M in losses. A person familiar with the matter told CNBC the compromised provider was web-performance service DebugBear and that the case went to UK law enforcement; Hudson Rock told Decrypt a DebugBear-hosted script contained wallet-draining code. Polymarket's US platform was not affected, and no smart-contract exploit has been reported. It is the second time this year: in June, tampered outside-vendor code on the site drained about $3M. If you used the site on Oct 29, check your account for withdrawals you didn't make.
Polymarket (polymarket.com)Since Oct 29, 2026
Posts 3
- Polymarket halts trading after a compromised third-party provider drains user wallets through its website
- Polymarket halts trading after a compromised third-party provider drains user wallets through its website
Polymarket Status@Poly_Status⚠️ Polymarket.com: We've found the cause and are working on a fix. We have identified and fixed the issue impacting our international platform, t.co/P7otbsyEWB. One of our third party providers was compromised, and we have referred this to relevant law enforcement.
- Polymarket halts trading after a compromised third-party provider drains user wallets through its website
Car@CarOnPolymarketIf you are a Polymarket user, lock down your account. I just got drained $800,000 Other accounts are also affected. Friend got drained $600k Please be careful dont interact with the site
