Polymarket Hack: $3M Stolen After Third-Party Breach

Polymarket Confirms Hackers Drained $3 Million From Users After Third-Party Breach
Polymarket has confirmed that hackers drained $3 million from users following a breach tied to a third-party service, according to information provided by the platform.
The incident was described as a third-party breach, meaning the point of failure was not necessarily Polymarket’s core infrastructure but an external provider or integration connected to the user experience. Polymarket said the attackers were able to access user funds as a result.
The disclosure highlights a recurring security challenge in crypto: even when a platform’s internal systems are not directly compromised, risks can still emerge through vendors, partners, and other dependencies that handle sensitive operations or user access.
Security incidents involving third parties can be particularly difficult for users to evaluate because exposure often depends on how systems are connected behind the scenes, including authentication flows, wallet infrastructure, or other operational services. Polymarket’s confirmation of the loss puts a clear figure on the impact to affected users.
Polymarket did not provide additional details in the provided information about the specific third party involved or how the breach occurred, beyond confirming that the hackers drained $3 million from users.
