Polymarket Confirms Crypto Hack, Refunds User Stolen Funds After Third-Party Vendor Breach
Published
Key Takeaways
- Breach Confirmed: Polymarket said a third-party vendor compromise injected malicious code into its website for some users.
- Funds Stolen: Blockchain monitoring firm PeckShield reported that approximately $3 million in cryptocurrency was taken.
- Victims Identified: A blockchain analyst reported losses affecting more than 11 victims.
Prediction market giant Polymarket has confirmed that hackers stole funds from an unspecified number of users following a third-party breach. The company said the malicious code affected only a subset of users before the company intervened.
Polymarket offers users the option to be paid in cryptocurrency, which is used for deposits and withdrawals.
How the Polymarket Breach Happened
Polymarket disclosed the incident in an X post on Thursday, June 25, 2026, stating that a compromise at a third-party vendor allowed attackers to inject malicious code into its website "for some users." According to the company, it has "contained" the incident and is now contacting affected victims and "refunding them in full."
Around the same time as Polymarket's post, blockchain monitoring firm PeckShield reported on X that a phishing campaign was targeting Polymarket users, with hackers stealing approximately $3 million worth of cryptocurrency.
PeckShield cited a separate blockchain analyst, Specter, who reported similar losses and claimed the funds were taken from more than 11 victim wallets holding PUSD.
Mounting Pressure on Polymarket
The hack is the latest setback for a company already facing scrutiny. On Sunday, an investigation revealed that Polymarket had paid online creators to post deceptive videos showing fake winning bets. In response, the company said it would audit its promotional content.
Polymarket spokesperson Connor Brandi confirmed to TechCrunch, which first spotted the announcement, that the breach led to users' funds being stolen but declined to provide further details or answer specific questions about the incident.
In late May, Polymarket tightened VPN restrictions and expanded KYC checks amid regulatory pressure. In April, the Grinex crypto exchange announced a cyberattack resulting in the theft of $13 million.
Related
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular