Polymarket Temporarily Restricted Trading After Third-Party Provider Incident
Polymarket temporarily restricted trading on Polymarket.com after a security incident involving an external provider. Operations resumed after approximately an hour, and the company promises compensation for affected traders.
The Polymarket security incident led to a temporary restriction on trading on the international Polymarket.com platform on October 29. The company said the problem originated with an external provider, and that it had identified and fixed the cause. It promised full compensation to affected traders.
According to a subsequent statement from the platform, trading resumed after approximately one hour. The current Polymarket status page lists the systems as operational.
The Polymarket security incident and operational restrictions
Polymarket did not publicly describe the exact course of the compromise or name the provider. However, it confirmed that this was a security problem on the side of an external partner, not a routine technical outage. The case was referred to the relevant law enforcement authorities.
The platform also stated that traders affected by the incident would receive full compensation. The number of affected users, the total amount of potential losses, and the method and timing of refunds were not disclosed.
In crypto applications, a provider-side incident can directly affect users even when an operator’s own infrastructure is not compromised by an attacker. External scripts loaded into a web application run in the user’s browser and may operate in the context of their session.
Unofficial technical findings and estimated losses
Third-party forensic and on-chain analyses linked the case to possible malicious JavaScript delivered through the DebugBear service. Estimates of losses ranging from approximately $2.5 million to $2.7 million also emerged.
However, Polymarket has not publicly confirmed these details. It is therefore not independently verified whether this particular attack method was used, what the full extent of the provider’s compromise was, or who was behind the attack. The reported amounts cannot be considered an official tally of the incident.
What users and the market will be watching
The most important development will be a more detailed statement from Polymarket on the number of affected clients, the amount of losses, and the compensation process. Confirmation of the compromised provider’s identity and the results of its own investigation also remain pending.
The platform currently says that its systems are operational. Users who believe they may have been affected by the incident should monitor Polymarket’s official communication channels for information about refunds and further instructions.
Sources
- Polymarket Status – The Polymarket status page says that the platform’s systems are operational after the incident; company statements about the compromised provider, the fix, and compensation were cited by multiple independent media outlets.
- Associated Press – Confirms the temporary trading halt, the compromise of an external provider, the resumption of operations, and the promise of full compensation to affected traders.
- BleepingComputer – Provides a timeline of the trading restriction and resumption and describes forensic findings about a possible malicious script; the amount of losses cannot be considered officially confirmed.
Verified and updated: October 30, 2026 06:28
