# Polymarket Sets $3.9 Million in Compensation After Script Attack

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/46020
Published: 2026-11-02T00:10:07.000Z
Updated: 2026-11-02T00:10:07.000Z
Section: Technology

> The company put attack-related compensation at $2.7 million and pause-related losses at $1.2 million, with 95% of affected wallets reimbursed by Oct. 30 afternoon.

Polymarket said it will compensate traders $3.9 million after an Oct. 29 script compromise on its international platform, covering positions sold through user sessions and some trading-pause losses.

The prediction-market platform’s postmortem, published Oct. 30 at 4:07 p.m. ET (20:07 UTC), split the amount into $2.7 million tied to the attack and $1.2 million for pause-related losses. The total is a compensation figure, not a confirmed estimate of funds taken from traders.

Polymarket described an attacker substituting a third-party monitoring script loaded by Polymarket.com. The company said the altered code used some traders’ active sessions to sell positions and transfer funds.

For positions sold or moved during the attack, Polymarket said compensation would use their value when taken and include sale slippage. In certain pause-related cases, it would cover the difference between a position’s value when trading paused and its later sale or settlement value, such as when a market ended during the halt or a trader sold after trading resumed.

The company said it identified eligible wallets using on-chain and trading data. Traders did not need to submit a claim or support ticket for initial reimbursement, but those who dispute an amount can request a review. By the afternoon of Oct. 30, Polymarket said, 95% of affected wallets had been fully reimbursed.

Polymarket said it removed the script, cleared caches, reset active sessions and paused trading and relayer activity before reopening. Planned measures include stronger content security policies, version pinning and sandboxing for third-party scripts. The expanded account follows the company’s [earlier reimbursement update](<https://www.tokenpost.com/news/technology/45076>).



## Links in this article

- [earlier reimbursement update](https://www.tokenpost.com/news/technology/45076)
