Polymarket user accounts hacked, firm cites third-party vulnerability
The post Polymarket user accounts hacked, firm cites third-party vulnerability appeared on BitcoinEthereumNews.com.
Polymarket, a decentralized prediction market platform, acknowledged that several user accounts experienced losses due to a security issue involving a third-party provider. The platform stated it has resolved the issue and that no lingering risks remain. According to user reports on social media, the issue appears to have affected users who signed up for Polymarket through Magic Labs, which lets users sign in via email addresses and creates non-custodial Ethereum wallets. Magic Labs sign-up is widely used by first-time crypto users who do not already have digital asset wallets. Polymarket users confirm that their wallets have been hacked The compromise news came last month. One of the senior traders stated that hackers have been using the Polymarket comment section to run a scam. As reported by Cryptopolitan, he claimed that users have lost over $500,000. During the weekend, 23pds, SlowMist’s Chief Information Security Officer, retweeted a warning from a community user about a malicious code in a Polymarket copy-trading bot on GitHub, posing security risks. Reports of account hacks surfaced again earlier this week on X and Reddit, as affected users took to social media to detail their losses. “Today I woke up and see 3 attempts to login to polymarket — My device isn’t compromised, google found nothing suspicious, all other services are fine. “So I went to Polymarket and realized that all my deals were closed and balance is $0.01,” the victim wrote.
Polymarket trader’s explanation of the bleach. Source: Reddit
Another user in the comment section claimed to have experienced a similar security breach, receiving three attempted login notifications before funds were drained from their Polymarket account. The victim claims that he did not click any links and had two-factor authentication enabled on their email. In response, Polymarket acknowledged the security issue on its official…
Filed under: News - @ December 24, 2025 1:18 pm