Polymarket
CompanySecurity timeline
- Named in breach reports by SecurityWeekPolymarket returns $3.9 million to traders after DebugBear DNS hijack
- Named in breach reports by Cyber Security NewsChainalysis confirms attacker used agentic techniques to expose customer account details
- Named in breach reports by Cyber Security NewsPolymarket international platform hit by wallet thefts after third-party provider compromise
Recent news
Polymarket returns $3.9 million to traders after DebugBear DNS hijack
Polymarket has returned $3.9 million to traders following a DNS hijack affecting DebugBear, a provider it relies on. DebugBear says its DNS records were compromised via its domain registrar, and early findings indicate a single customer was targeted.
Chainalysis confirms attacker used agentic techniques to expose customer account details
Chainalysis confirmed an attacker used "offensive agentic techniques" to access its systems and internal tools, exposing user IDs, full names, work email addresses and organisation role labels. It detected the intrusion in October, says investigation graphs, notes, cases, query results, clear-text passwords, MFA secrets and session tokens show no sign of access, and has not disclosed the entry point, vulnerabilities, attacker or total number of affected users.
Polymarket international platform hit by wallet thefts after third-party provider compromise
Polymarket's international platform suspended trading on 29 October 2026 after a compromised third-party provider led to unauthorised withdrawals and closed positions. Reporting links the incident to DebugBear, a website performance monitoring service, though Polymarket's statement did not name the vendor. Outside estimates cited by CNBC put withdrawals at at least $2.7 million across 710 wallets, and the company has pledged to make users whole.