Prediction market exchange Polymarket temporarily halted trading on its international platform on Thursday following a security breach that drained approximately $2.65 million in user funds. Traders noticed unauthorized withdrawals during the afternoon hours, prompting the exchange to shift its systems into a cancel-only mode shortly after 2:00 p.m. ET. The exploit stemmed from an external compromise affecting UK-based web performance monitoring firm DebugBear, which provides real user monitoring services utilized by the prediction site.
DebugBear acknowledged the breach publicly while its website remained offline into the evening. According to analytics data from Arkham, the malicious actor managed to siphon tokens valued at roughly $2.65 million before operations were secured. Polymarket representatives confirmed that the issue was mitigated by 3:00 p.m. ET and stated that law enforcement agencies had been notified of the unauthorized activity. The platform also assured all affected users that full reimbursements would be issued.
This security lapse hits the prediction market sector as it faces heightened regulatory scrutiny and political attention regarding market integrity, insider trading allegations, and federal oversight. While the international exchange grapples with the fallout from the vendor-linked exploit, the company maintains that its federally regulated U.S. counterpart remained unaffected by the incident.
Comments