Polymarket Users Report Unauthorized Asset Withdrawals Amid Possible Frontend Attack
Written with artificial intelligence.
Multiple users of Polymarket, a prediction market platform, have reported unauthorized withdrawals, with one trader claiming a loss of approximately $800,000. Affected individuals are advised to secure their accounts and refrain from interacting with the site until further notice.
Incident Overview
On October 30, reports surfaced from several Polymarket users indicating that their accounts had been compromised, resulting in unauthorized asset withdrawals. One trader, identified as Car on the X platform, stated that approximately $800,000 worth of assets were stolen from his account, with all holdings sold off without his consent. A friend of his reportedly lost around $600,000 as well.
User Alerts
In light of these incidents, users are being urged to take precautionary measures. Specifically, they should:
- Lock their accounts immediately.
- Avoid any interactions with the Polymarket website until further notice.
Additional reports from users on the X platform and within the Polymarket Discord community suggest that the site's frontend may have been compromised, leading to unauthorized withdrawals. Some users claim losses of about $200,000, while others reported receiving unauthorized withdrawal requests through the official website.
Past Incidents
This isn't the first security issue Polymarket has faced. Earlier in June, the platform experienced a phishing attack due to a breach in a third-party vendor, resulting in the theft of approximately $2.94 million in user assets. As of now, Polymarket has not issued a public response regarding the latest incidents.