Polymarket announced it will fully refund its users after falling victim to a malicious hack that drained over $3 million from the wallets of 11 people.
A Must-Try Prediction Market Site
The Hack Details
According to statements from the site's spokespeople, Polymarket's attackers injected a malicious script directly into the site's interface through an undisclosed third-party vendor.
The scripts targeted wallets holding pUSD, Polymarket's own token. Once the funds were pulled from the wallets, the attackers bridged them to Ethereum before cashing out.
The attack was contained before it could affect more accounts. Even so, a total of $3.1 million was stolen from the victims' wallets.
Is Polymarket's Security in Question?
Whether this attack will hurt Polymarket's reputation remains to be seen. At first, the response to those affected was fast and precise, with the announcement of a full refund of the stolen balances.
Here are some of the positive takeaways we can point to from this unfortunate event.
Total Refund
Polymarket showed transparency by announcing it will take care of compensating its users in full for the funds withdrawn during the attack. This quick response brings some peace of mind both to those affected and to anyone who heard about the hack.
Check on Security
With this hack, it would be the second attack Polymarket has suffered in recent months, which has pushed the platform to run an intensive security review to prevent future incidents.
Self-Protection Against Similar Attacks
Although Polymarket confirmed the breach the attackers used has been closed, there are ways you as a user can guard against similar situations. Here are a few.
Inspect the Prompt
This recent attack on the trading platform happened on the front end, where hackers inject malicious code to redirect users' actions off the platform and gain access to information as an entry point. Reading everything carefully before hitting sign up or confirming a transaction when trading anything on the
list of prediction markets
is a simple way to notice when you've been taken off the actual site.
Match the Contract
Check that the address you're interacting with matches the Polymarkets officially published smart contract.
Bookmark Contracts
Save Polymarket's official contracts along with their addresses.
Manage Your Permissions
Avoid giving apps like Polymarket full permissions or direct access to your wallet and your crypto portfolio.
Recommended Prediction Market Site
What Analysts Are Saying About This Attack
Crypto analysts and experts say this type of attack is a very common tactic used by hackers against apps like Polymarket. This kind of hack doesn't touch the site's vault; it hits the front end instead, meaning attackers broke through security by swapping out some of the buttons and on-screen options to trick users.
Other trading market analysts say this attack directly hurts the reputation of apps like Polymarket at a key moment when their legality is already being questioned, and while other attacks are still under investigation by the Commodity Futures Trading Commission (CFTC).
How to Trade Safely on Polymarket
At a time when hackers keep getting more creative about breaking site security, it's important to pay attention:
- Don't grant permissions without reviewing them first when your wallet pops up.
- Limit your spending. When the app asks for permission to access your tokens, check the change manually and adjust the amount to only what you need.
- Use security tools. Install security extensions; some are available as free downloads.
Polymarket to Refund Fully Affected Users
Despite the rough experience of the 11 affected users, Polymarket announced it will fully refund the money stolen from their wallets. How quickly they responded and how they've handled the fallout says a lot about this trading platform. Get more information on Polymarket and its prediction market services using our banners here.
Don't Miss Out on This Site
Advertiser disclosure
