Polymarket Halts Trading After $2.7M Hack Exposes Third-Party Vulnerability

Trading operations on Polymarket’s flagship international platform were temporarily suspended following a significant security breach that resulted in the draining of funds from the digital wallets of numerous traders. The incident, which has raised fresh concerns about the resilience of decentralized prediction markets, was traced not to the platform’s core infrastructure but to a third-party vendor based in the United Kingdom. Law enforcement agencies in the UK have been notified of the compromise, and the company initiated an immediate investigation that led to a temporary pause in trading activities for several hours to assess the extent of the damage and secure user assets. According to data from blockchain analytics firm Bubblemaps, approximately 700 users were affected by the breach, with a total of around $2.7 million stolen from their accounts. While Polymarket declined to provide official figures on the number of impacted traders or the precise financial loss, the company has publicly committed to refunding all affected users. Prominent traders on social media platform X voiced their frustration over the sudden loss of funds, highlighting the volatility and risks inherent in cryptocurrency-based trading environments. The swift response by the platform’s security team was noted as a critical step in mitigating further potential losses. It is crucial to note that this security incident did not impact users of Polymarket US, the company’s newer, federally regulated financial exchange designed specifically for the United States market. Polymarket operates two distinct entities: the flagship international platform, which is cryptocurrency-based and banned in several countries including the US, and Polymarket US, which functions under strict domestic regulatory oversight. This separation underscores the company’s dual approach to navigating complex global regulatory landscapes while maintaining a high-volume international trading ecosystem. This breach is not an isolated incident for Polymarket, which has faced multiple security challenges since its launch in 2020. In June 2026, the platform experienced another significant breach that resulted in over $2 million in losses for affected traders. These recurring security woes have kept the company in the spotlight, particularly as it continues to expand its user base and market capitalization. The company has also been embroiled in several high-profile controversies, including allegations of insider trading that led to arrests. Notable cases include a Special Forces soldier accused of wagering on the capture of Venezuela’s former leader and a Google employee allegedly using confidential information to generate millions in profits, both of whom have pleaded not guilty. Despite these challenges, Polymarket continues to attract substantial investment and maintain a high valuation. In August 2026, the company raised $1 billion in a fundraising round led by 1789 Capital, a venture capital firm where Donald Trump Jr. is a partner. This investment has propelled Polymarket’s valuation to $21 billion, signaling strong market confidence in its long-term potential. As the platform moves forward, it faces the critical task of bolstering its security infrastructure to protect user assets and restore trust among traders and investors alike.