· javascript

Polymarket halts trading after crypto-draining script breach, $2.5M traced

Prediction market platform Polymarket temporarily suspended trading on Thursday after hackers compromised a third-party service to distribute cryptocurrency-draining JavaScript, with approximately $2.5 million in assets traced to a suspected attacker wallet.


The company confirmed the security incident, saying it had identified and fixed the issue affecting its international platform, Polymarket.com, and referred the breach to law enforcement. "One of our third party providers was compromised, and we have referred this to relevant law enforcement," Polymarket said. "Anyone who has been impacted will be made whole.

Out of an abundance of caution, we have temporarily halted trading and are working to bring the platform back online." Polymarket initially placed its exchange into cancel-only mode at 2:05 p.m. ET and paused relayer actions while investigating the incident.

At 2:37 p.m., the company unveiled that the issue had been fixed and that trading was temporarily halted out of an abundance of caution. Trading resumed approximately one hour after the initial suspension, with the incident marked resolved at 3:05 p.m.

Earlier coverage

Related coverage

Also worth reading

  1. Angular 20.3.35 and 21.2.26 released, fixing downgraded component template compilation
  2. next.js 16.4.4 released
  3. next.js 16.5.0-canary.35 released with error handling fixes, cache fixes, and docs clarifications
  4. Next.js 16.5.0-canary.33 released, stopping error inspection patching when source maps are disabled
  5. AWS installs an AI accelerator every 14 seconds and eyes $1 trillion annual revenue