Full Breakdown
Hack Halts International Trading on Polymarket
By Drooid · · How we work
In this breakdown
01
Core Event
During an afternoon outage, Polymarket— a cryptocurrency-based prediction-market platform—temporarily stopped trading on its international exchange for roughly an hour after a third-party vendor was breached. The compromised provider, DebugBear, a UK-based web-analytics tool, allowed attackers to access users’ wallets and withdraw funds. Polymarket announced that the U.S.-focused platform (Polymarket.us) was unaffected.
02
Background & Context
Polymarket has become a flashpoint in the ongoing debate over how prediction markets should be regulated. A coalition of 40 state attorneys general filed an amicus brief supporting New Jersey’s push for the Supreme Court to permit state regulation, while the Commodity Futures Trading Commission (CFTC) opened a separate investigation into whether the company violated a settlement restricting U.S. users from its offshore platform. President Donald Trump has publicly favored federal oversight, and his son Donald Trump Jr. serves as an adviser; his firm 1789 Capital led a $1 billion fundraising round that lifted the company’s valuation to $21 billion.
03
Data & Statistics
- Reported losses range from $2.65 million (blockchain-analysis firm Arkham) to $2.7 million (analytics firms Betting Intelligence and Polysights).
- The breach affected roughly 700 users and 710 wallets according to the same analyses.
- Polymarket processes about $200 million in daily trading volume and was valued at $21 billion after a $1 billion investment led by Donald Trump Jr.’s 1789 Capital.
04
Official Statements & Responses
The company said it would fully reimburse affected traders and had referred the matter to “relevant law enforcement.” DebugBear confirmed an “ongoing security incident” and urged customers to remove its embed code. Both Polymarket and DebugBear indicated that the breach originated from the United Kingdom, and the incident was reported to UK authorities.
05
Verbatim Quotes
- “One of our 3rd party providers was compromised, and we have referred this to relevant law enforcement,” — X. Polymarket
06
Conflicting Reports & Gaps
Sources differ on the exact monetary loss: NBC News cites $2.65 million siphoned, while CNBC, Wired, and analytics firm data point to $2.7 million across more than 700 wallets. Neither Polymarket nor DebugBear disclosed the precise number of affected accounts, and the company declined to comment on the specific loss figure.
07
Why It Matters
The hack underscores the vulnerability of platforms that rely on third-party services for critical functions. Because Polymarket’s international exchange operates on the Polygon blockchain and is not regulated in the United States, the incident fuels arguments from regulators and state attorneys general that stronger oversight is needed to protect users. The timing—just days before the U.S. midterm elections, when trading volumes are expected to surge—adds pressure on the company to restore confidence while navigating multiple legal investigations.
08
What’s Next
Polymarket has pledged to reimburse all impacted traders and has resumed trading on its international platform. The company’s ongoing cooperation with UK law enforcement and the pending CFTC probe suggest further scrutiny in the coming weeks, particularly as the platform prepares for heightened activity surrounding the upcoming U.S. midterm elections.