Polymarket temporarily suspended trading on its international exchange on October 29 after a security incident involving a compromised third-party service provider. The breach reportedly enabled attackers to withdraw funds from some users’ accounts without authorization. The prediction market platform said it had identified and fixed the issue and would fully reimburse affected traders.
The trading halt lasted approximately one hour, according to the company’s status updates. Although trading subsequently resumed, the incident has raised questions about the security risks associated with external software providers and the protection of funds held by users on cryptocurrency-based prediction markets. Reports linked the compromised provider to UK-based website monitoring company DebugBear.
Key Takeaways
- Polymarket temporarily halted trading on its international platform on October 29, 2026.
- The incident involved a compromised third-party service provider.
- Blockchain analytics estimates placed suspected losses at approximately $2.6 million–$2.7 million.
- More than 700 user accounts were reportedly affected, according to security researchers cited by media reports.
- Polymarket promised to fully reimburse affected traders.
- The company referred the incident to UK law enforcement.
- The separate Polymarket US platform was not reported to be affected.
What Happened in the Polymarket Security Breach?
The incident became public on October 29 after Polymarket users began reporting unauthorized withdrawals from their accounts. Several traders raised concerns on social media after noticing that funds had disappeared from their wallets.
Polymarket subsequently moved its international exchange into a restricted operating mode. Its status page initially reported that the exchange was in cancel-only mode, meaning users could cancel existing orders but could not place new trades. Relayer actions were also paused while the company investigated.
The company later announced that it had identified and fixed the issue affecting its international platform.
In its public update, Polymarket said one of its third-party providers had been compromised and confirmed that the matter had been referred to relevant law enforcement authorities.
The platform also promised to reimburse everyone affected by the incident.
Trading resumed later that day after the temporary suspension.
How Much Money Was Reportedly Stolen?
The financial impact of the breach could run into millions of dollars.
According to blockchain analytics estimates cited by CoinDesk and other publications, approximately $2.7 million in losses were tracked following the incident. The Wall Street Journal separately reported that at least $2.6 million had been drained from more than 700 accounts.
These figures are estimates based on blockchain activity and reported wallet movements, rather than a final loss figure confirmed by Polymarket.
| Incident detail | Reported information |
|---|---|
| Incident date | October 29, 2026 |
| Estimated losses | Approximately $2.6 million–$2.7 million |
| Reported affected accounts | More than 700 |
| Affected platform | Polymarket international exchange |
| Trading suspension | Approximately one hour |
| Compensation | Full reimbursement promised |
| Law enforcement | UK authorities notified |
The final number of affected accounts and the total amount requiring reimbursement have not been publicly confirmed by the company.
DebugBear Linked to the Third-Party Security Incident
Reports have linked the incident to DebugBear, a UK-based company that provides website performance monitoring and debugging services.
DebugBear acknowledged that it was affected by an ongoing security incident. The company also advised customers using one of its products to remove the relevant website embed code.
The connection matters because websites frequently rely on external services for analytics, performance monitoring, customer support and other functions. These integrations can introduce additional security risks if a third-party provider is compromised.
However, Polymarket’s initial public statement did not identify the provider by name. The reported connection to DebugBear should therefore be distinguished from the company’s own confirmation that a third-party provider was compromised.
The incident highlights how a vulnerability outside a platform’s core infrastructure can potentially affect its users.
Why Did Polymarket Suspend Trading?
Polymarket suspended trading as a precaution while investigating the security incident.
Its international exchange uses blockchain infrastructure, and transactions involving user funds require particular care when suspicious activity is detected.
Moving the exchange into cancel-only mode limited new trading activity while the company worked to identify the problem. Pausing relayer actions also restricted certain transaction-related operations during the investigation.
The temporary suspension was therefore intended to limit further exposure while the company addressed the compromised integration.
Polymarket subsequently said it had fixed the issue and resumed trading. Its status page recorded the incident as resolved.
Will Polymarket Refund Affected Users?
Polymarket has promised to fully reimburse traders affected by the breach.
The company said that anyone impacted would be made whole. However, it has not publicly provided a complete breakdown of the reimbursement process, the final amount involved or a detailed payment timeline.
Affected traders will need to follow official platform communications regarding their individual cases.
The reimbursement commitment is important because unauthorized withdrawals can create uncertainty about whether users will recover funds, particularly when cryptocurrency transactions have already been processed on a blockchain.
Users should rely on official Polymarket communications and avoid sharing wallet recovery phrases, private keys or account credentials with anyone claiming to offer assistance.
Was Polymarket US Also Affected?
The reported incident involved Polymarket’s international platform, Polymarket.com.
The company operates a separate US platform, and reports said that the US service was not affected by this particular breach.
The distinction matters because the two platforms operate under different arrangements. The international exchange is a cryptocurrency-based platform using the Polygon blockchain, while Polymarket US operates as a separate federally regulated financial exchange.
The incident should not be interpreted as evidence that every Polymarket service or every user account was compromised.
Not the First Security Incident for Polymarket
The latest breach adds to a series of security concerns involving the prediction market platform.
In June 2026, Polymarket users were also affected by a separate third-party security incident involving the platform’s front end. Reports at the time placed the losses at approximately $3 million.
The October incident therefore raises questions about how prediction market platforms manage external software dependencies and protect users against compromised integrations.
For companies handling cryptocurrency balances, security needs to extend beyond the core trading engine. Third-party scripts, website components, authentication systems and transaction infrastructure can all become potential points of exposure.
The Bigger Picture
Polymarket’s incident illustrates a wider challenge facing cryptocurrency and fintech platforms: security risks can originate from vendors that are not directly responsible for holding customer funds or operating the core exchange.
External software providers can make digital platforms easier to operate, but they also expand the number of systems that need to be secured and monitored. A compromise involving an embedded service can create consequences for a platform’s users even when the underlying blockchain itself has not been compromised.
The incident also puts the spotlight on trust. Prediction markets depend on users being confident that their funds, positions and transactions are protected. Reimbursing affected traders can address financial losses, but restoring confidence will also depend on stronger vendor oversight, transparent incident reporting and effective safeguards against similar attacks.
Looking Ahead
Polymarket has fixed the reported issue, resumed international trading and promised full reimbursement for affected users. The next important developments will be the final accounting of losses, the completion of reimbursements and any further details released by the company or UK authorities about the security incident.
For the wider cryptocurrency industry, the breach is another reminder that third-party integrations require rigorous security checks. Platforms handling customer funds will need to treat external vendors as part of their security perimeter rather than assuming that risks end at their own infrastructure.
Frequently Asked Questions
1. Why did Polymarket pause trading?
Polymarket temporarily suspended trading on its international platform after a third-party service provider was compromised, leading to reports of unauthorized withdrawals from user accounts.
2. How much money was stolen from Polymarket users?
Blockchain analytics estimates and media reports placed the suspected losses at approximately $2.6 million–$2.7 million. The company has not publicly confirmed a final figure.
3. Will Polymarket refund users who lost money?
Yes. Polymarket has promised to fully reimburse all traders affected by the incident. A complete reimbursement timeline has not been publicly disclosed.
4. Was DebugBear responsible for the breach?
Reports linked the incident to DebugBear, a UK-based website monitoring provider. DebugBear acknowledged an ongoing security incident, while Polymarket confirmed that a third-party provider had been compromised without naming it in its initial statement.
5. Is Polymarket trading working again?
Yes. The international exchange resumed trading after a temporary suspension of approximately one hour on October 29, 2026.
6. Was Polymarket US affected?
Reports said the incident affected the international platform rather than the separate Polymarket US service.
Get the day’s top stories in your inbox
One concise email. No spam, unsubscribe anytime.
