Polymarket hacked: $3M in crypto stolen from user wallets

Polymarket has suffered a security breach affecting user accounts. Hackers gained access through a third-party vendor and stole funds from compromised wallets. The incident may be linked to a wider phishing campaign targeting cryptocurrency users. The attack unfolded after malicious code was injected into Polymarket’s website interface. This allowed hackers to access user accounts and transfer over $3 million in cryptocurrency to Ethereum addresses. The platform confirmed that affected users will be notified and fully reimbursed for any losses.

The breach occurred as Polymarket reported record trading volumes during the 2026 FIFA World Cup. Earlier, the company announced it had surpassed $1 billion in annualised revenue. Despite its rapid growth, Polymarket has faced past controversies, including allegations of paying influencers for misleading promotions.

The platform has high-profile backers, including Donald Trump Jr. Investigators are examining whether the attack was part of a broader phishing scheme targeting crypto wallets. Polymarket will refund all stolen funds to affected users. The company has not yet detailed additional security measures. Authorities and cybersecurity experts continue to assess the full impact of the breach.