Polymarket Is Returning $3.9 Million After International Platform Attack

Polymarket is returning $3.9 million after an Oct. 29 attack on its international platform drained user wallets and disrupted trading, with the payout covering stolen funds and losses tied to a temporary halt.

The company’s Oct. 30 update divided the total into $2.7 million for drained wallets and $1.2 million for pause-related losses. It said 95% of wallets affected by the hack had been fully refunded by that afternoon. Users who believe their reimbursement is wrong can ask Polymarket to review it.

Polymarket said attackers changed a performance-monitoring script supplied by an unnamed third-party provider. Polymarket said the altered code used active sessions to sell positions and move funds. The company removed the script, reset active sessions, and paused trading and its relayer. Trading was in cancel-only mode from 2:05 to 3:05 p.m. ET (18:05 to 19:05 UTC) Thursday, Oct. 29. Users could cancel orders but could not place new trades.

Polymarket has not named the provider. Completion of refunds and reviews of disputed payments remain the next steps for affected users.