Polymarket Suffers $700K Breach After Internal Admin Wallet is Compromised

▤ Summary

Polymarket suffered a security breach after a six-year-old internal private key was compromised, allowing attackers to drain roughly $700K in POL tokens. The company says the compromised wallet was used for internal operations and that no Polymarket or UMA contracts were exploited, so user funds and market resolution functions remain safe. Polymarket rotated the compromised key, revoked production permissions, and plans to move all private keys to a KMS while investigating any exposed internal secrets. Blockchain analysts observed automated withdrawals splitting the stolen POL across multiple addresses and exchanges; the team is conducting a post-mortem and remediation steps.

▦ Linked Companies