Polymarket Investigates Suspected Frontend Attack Following Asset Theft Reports

Multiple users of the decentralized prediction platform Polymarket have reported unauthorized asset transfers, leading to suspicions of a new frontend security breach. The incident came to light on October 29, 2026, when several traders shared accounts of missing funds and suspicious withdrawal requests on social media platforms and the project's official community channels. While the platform's core smart contracts appear unaffected, the reports suggest a compromise of the user interface similar to previous supply-chain attacks in the industry.

Traders Report Significant Losses and Malicious Scripts

The alarm was first raised by a prominent Polymarket trader known as "Car" on X, who reported that approximately $43,000 in assets were drained from his account after his existing positions were liquidated without his consent. The trader further noted that a colleague had lost an additional $12,000 in a similar manner. These reports were quickly followed by other users in the Polymarket Discord community, with some individuals claiming losses as high as $70,000.

• Unauthorized liquidation of active betting positions.
• Automated withdrawal of USDC and pUSD to external wallets.
• Reports of fraudulent signature requests appearing on the official website.
• Suspected injection of malicious scripts via third-party dependencies.

Users are currently being advised by community moderators and fellow traders to avoid interacting with the Polymarket website, refrain from signing any wallet transactions, and consider locking their accounts until an official statement is released.

Context of Previous Security Vulnerabilities

This suspected incident follows a documented history of frontend challenges for the platform. In June 2026, Polymarket confirmed a third-party supplier breach where attackers injected a malicious script into the website's frontend, resulting in the theft of $2.94 million in user assets. During that event, funds were bridged from the Polygon network to Ethereum before being consolidated. The platform also dealt with a separate exploit in May 2026 involving a legacy private key that resulted in a $700,000 loss from internal operations wallets.

"I advise all users to lock their accounts and refrain from interacting with the website for now. All my positions were sold and assets transferred out without my authorization", stated trader Car in a public warning to the community.

As of the current press time, Polymarket officials have not issued a formal response or post-mortem regarding the latest reports. The platform, which has seen record-breaking trading volumes exceeding $20 billion earlier this year, remains under scrutiny as it navigates both security hurdles and ongoing regulatory investigations. Analysts suggest that if a frontend breach is confirmed, it would likely stem from a supply-chain compromise, a common vector where external libraries or scripts used by the website are hijacked to intercept user credentials or transaction data.