What happened?
According to CryptoSlate, prediction market platform Polymarket experienced its second security incident with a multi-million-dollar impact within four months. Per the same source, these are two separate cases: a theft was reported in June, and in October the funds were subsequently recovered ("recovered code"). CryptoSlate concludes from this that it points to a recurring vulnerability inside the platform's trading interface.
The attack on Polymarket was also mentioned as a breaking news item by Kryptonovinky.cz and Kryptonovinky.sk, which placed the event within a broader overview of market developments.
An important note: the exact scale of the damage, the technical description of the vulnerability, and the identity of the attacker are not stated in the available sources. These details remain unknown for now.
Is this a systemic problem, or two unrelated events?
Here we need to separate facts from interpretation. The fact is that CryptoSlate reports two incidents within a four-month window. The interpretation CryptoSlate offers is that both events point to a "recurring exposure" within the trading interface.
Whether the two cases are technically related (same attack vector, same flaw) does not follow from the available sources. It is also not confirmed what specific security adjustments Polymarket made after the June incident. CryptoSlate explicitly states that broader security changes remain unclear.
What is the platform launching in the meantime?
Over the same period, Polymarket is expanding its product offering. According to The Defiant, the platform added fifteen-minute bets on gold and silver built on price data from the Chainlink network.
The Defiant describes the mechanics as follows:
| Parameter | Detail (per The Defiant) |
|---|---|
| Contract type | 15-minute bets on gold and silver |
| Price source | Chainlink (start-and-end spot price) |
| Cost to a US taker | roughly USD 1.74 per 100 contracts traded at 50 cents |
| Note | before rebates |
The term "taker" refers to the party that accepts an existing offer in the order book (as opposed to the "maker," who provides liquidity). The "spot price" is the current market price of the underlying asset.
None of the sources claim any connection between the launch of the new products and the security incidents. We present both separately.
What was the state of the market at the time?
Kryptonovinky.cz and Kryptonovinky.sk set the Polymarket news in the context of the broader market day. According to CoinGecko data cited by both outlets, the following was trading on Friday morning:
| Asset | Price | Daily change | Weekly change |
|---|---|---|---|
| Bitcoin | USD 78,186 | -2.07% | -4.63% |
| Ether | USD 2,238 | -3.11% | -7.46% |
Both outlets also referenced data on US spot bitcoin ETFs from Farside Investors for Thursday the 29th (the exact month is not stated in the available excerpt). This market data is not directly related to the Polymarket incident and serves only to provide a time frame.
What to watch for with this type of event?
This is not advice on what to do with your money, but about what information gives a more complete picture:
- The platform's official statement. Whether Polymarket publishes a post-mortem with a technical description and specific remedial steps.
- The scale of the damage. The confirmed amount and whether end users were affected or the platform's own funds.
- Whether it was the same vector. Confirmation or refutation that the June and October cases share a cause.
- On-chain trail. With incidents of this type, fund movements are usually traceable on the blockchain, which allows for independent verification.
Once this information becomes available, charliedesk will return to the case and compare it with what is known today.