Finbold 2026-05-23 16:42:21

Polymarket suffers security breach as attacker drains internal wallet

The world’s largest decentralized prediction market platform, Polymarket , suffered a security incident that resulted in the loss of approximately $520,000 to $700,000 in cryptocurrency . In this line, Blockchain investigator ZachXBT first highlighted the suspicious activity on May 22 after noticing large outflows from contracts linked to the platform on the Polygon ( POL ) blockchain. The incident involved rapid withdrawals, with reports indicating that an attacker drained around 5,000 POL tokens every 30 seconds from addresses associated with Polymarket’s UMA CTF Adapter. Polymarket exploit transfers. Source: Arkham The adapter serves as a key integration for market settlement through UMA’s Optimistic Oracle system. Funds, primarily in USDC and POL, flowed to an attacker-controlled address beginning with 0x8F98. The systematic nature of the drains suggested the use of an automated script. Polymarket responded swiftly, with the team clarifying that the breach did not stem from a vulnerability in the platform’s core smart contracts or a compromise of user funds. Instead, the incident originated from the exposure of a private key belonging to an outdated internal operations wallet, reportedly six years old, used for rewards payouts and system top-ups. The wallet held treasury funds rather than customer deposits or trading collateral. Polymarket response Engineers immediately rotated keys, revoked the compromised access, and collaborated with ZachXBT and various exchanges to trace and recover portions of the stolen assets. With @zachxbt leading the effort alongside @Bitcoin_Vietnam and @ChangeNOW_io , we managed to freeze $164,000 of the $573,200 in funds transferred from the compromised private key. Really was a team effort, and it was amazing how quickly everyone reacted. Thanks to everyone who… https://t.co/LW2pHZuFG7 — Josh (@devjoshstevens) May 22, 2026 According to updates, the platform successfully recovered about $164,000 of the total drained amount, which ranged between $573,000 and $700,000 depending on token price fluctuations at the time. Notably, trading on Polymarket continued without interruption throughout the event, and market resolutions remained unaffected. As one of the most prominent prediction markets, Polymarket processes significant trading volumes, making such incidents particularly visible within the decentralized finance space. The post Polymarket suffers security breach as attacker drains internal wallet appeared first on Finbold .

Наиболее читаемые новости

Ethereum Whale Dumps 20,000 ETH for $41.18M i...
2026-05-23
Expert to XRP Investors: This Is Your Best Ch...
2026-05-23
Dogecoin Mirrors Previous Mega Bull Trend — I...
2026-05-23
Hyperliquid ETFs record $36 mln inflows in 5...
2026-05-23
Firefox Adds AI Off-Switch, Brave Charges $60...
2026-05-23
Nvidia’s Huang slams partners over China chip...
2026-05-23
Could the $50 XRP Candle Happen Again? The Ge...
2026-05-23
Bitcoin Pizza Day: A $41 Experiment Now Worth...
2026-05-23

Прочтите Отказ от ответственности : Весь контент, представленный на нашем сайте, гиперссылки, связанные приложения, форумы, блоги, учетные записи социальных сетей и другие платформы («Сайт») предназначен только для вашей общей информации, приобретенной у сторонних источников. Мы не предоставляем никаких гарантий в отношении нашего контента, включая, но не ограничиваясь, точность и обновление. Никакая часть содержания, которое мы предоставляем, представляет собой финансовый совет, юридическую консультацию или любую другую форму совета, предназначенную для вашей конкретной опоры для любых целей. Любое использование или доверие к нашему контенту осуществляется исключительно на свой страх и риск. Вы должны провести собственное исследование, просмотреть, проанализировать и проверить наш контент, прежде чем полагаться на них. Торговля - очень рискованная деятельность, которая может привести к серьезным потерям, поэтому проконсультируйтесь с вашим финансовым консультантом, прежде чем принимать какие-либо решения. Никакое содержание на нашем Сайте не предназначено для запроса или предложения