Polymarket hack exposes $3M crypto theft and security flaws

Polymarket has revealed a security breach that took place on 25 June 2023. Hackers targeted user accounts and stole an estimated $3 million in cryptocurrency. The incident has raised concerns about the platform’s security measures. The attack began after hackers compromised a third-party vendor. They injected malicious code into Polymarket’s frontend, enabling unauthorised access to user accounts. Investigators believe this may have been part of a wider phishing campaign targeting cryptocurrency wallets.

The platform has since promised to notify all affected users. It has also committed to fully refunding any stolen funds. Despite the breach, Polymarket has continued to grow, recently reporting over $1 billion in annualised revenue.

Trading on the platform surged to record levels during the 2026 FIFA World Cup. However, the company has faced criticism before. A Wall Street Journal report alleged it paid influencers for misleading promotions. High-profile backers, including Donald Trump Jr, have still supported the platform. Polymarket is working to address the security failure and compensate users. The breach highlights ongoing risks in cryptocurrency platforms. The company’s rapid growth and high trading volumes remain unaffected so far.