Polymarket Confirms Fund Safety After $600K Security Exploit

Key Facts

The Polymarket team has confirmed that user funds and market resolutions remain secure following a security exploit that resulted in losses exceeding $600,000. According to analyst reports, the breach was linked to a suspected private key compromise in the platform's top-up operations rather than a flaw in its core smart contracts. This clarification aims to bolster user confidence in the integrity of the world's largest decentralized prediction market.

Josh Stevens, VP of Engineering at Polymarket, clarified that the exploit targeted a six-year-old private key used for internal reward configurations, and all associated permissions have since been revoked (per Cointelegraph, May 22, 2026). While core infrastructure remains unaffected, the incident caused the UMA token—used for market resolution—to dip 3.3% in intraday trading. On-chain data from Polygonscan showed the attacker systematically drained batches of 5,000 POL tokens every 30 seconds during the height of the exploit (per market data).