Polymarket hit with $3.1M cyberattack
Polymarket’s prediction market platform has been hit with a cyberattack, with hackers targeting a compromised third-party vendor and stealing around $3.1 million from user funds.
The operator confirmed the attack on June 25, 2026, but hasn’t officially shared how many individuals were affected, which exact vendor was compromised, or who conducted the attack.
Polymarket wrote:
“This morning we discovered a 3rd party vendor had been compromised, injecting a malicious script into our frontend for some users. We’ve contained it & removed the affected dependency. We’re contacting impacted users & refunding them in full.”
At the same time, reports from blockchain monitoring company PeckShield have estimated that 11 users suffered losses as a result of the attack, with $3.1 million in cryptocurrency stolen in total from their funds.
Since the announcement of the cyberattack, Polymarket has also faced online criticism, with users claiming that they had warned of a breach and had found vulnerabilities in the platform themselves. Additionally, one of the affected individuals shared how he believes the compromise could have happened.
The user who lost funds in the attack wrote:
“My Polymarket account was hacked. I recently bought a VPS from Xorek Cloud and stored my private key on it. I’m not sure how the compromise happened, but that’s the only possible security risk I can think of.”
Polymarket hasn’t provided a clear timeline for returning the money to the users, but stated that the refunds are in process.
As a content writer at AffPapa, Alla focuses on daily coverage of iGaming news, writes in-depth articles on the most relevant topics of the sector, and presents insights from industry professionals through dedicated interviews. She combines her background in research with an engaging and informative approach to help readers stay up-to-date with everything that’s happening in global iGaming markets.


















