Polymarket Hit By ‘Internal Top-Up’ Wallet Exploit, $700K Drained
On-chain investigator ZachXBT flagged a suspected drain from a wallet linked to Polymarkets Polygon infrastructure Friday.Polymarket devs said an “internal top-up” wallet was drained, while user funds and market outcomes remain safe.On-chain analytics platform Bubblemaps later estimated the loss at about $700,000 across 16 addresses. On-chain investigator ZachXBT flagged a suspected drain tied to Polymarket on Friday, saying over $520,000 had been taken from addresses linked to the prediction markets infrastructure. Polymarket developers later acknowledged the incident and said it involved an internal rewards and did not affect user funds or market outcomes. “Findings point to a private key compromise of a wallet used for internal top-up operations, not contracts or core infrastructure,” the Polymarket Developers account tweeted. Were aware of the security reports linked to rewards payout. User funds and market resolution are safe. Findings point to a private key compromise of a wallet used for internal top-up operations, not contracts or core infrastructure. More updates to follow. Over an hour after the initial disclosure, on-chain analytics platform Bubblemaps estimated the loss at about $700,000, saying the funds were split across 16 addresses and routed through centralized exchanges and other services. Prediction markets on Polymarket use contracts that record bets and pay winners after an outside service