Multiple Polymarket users report unauthorized transfers, allegedly due to a front-end attack
BIBIBI
AT A GLANCE
Multiple users claimed that Polymarket assets were transferred out without authorization and suspected a front-end attack; as of press time, the platform had not responded.
Article
Multiple Polymarket users claim assets were transferred out without authorization, allegedly due to a front-end attack
PANews October 30 reported that Polymarket trader Car posted on X, saying that approximately assets in their Polymarket account were stolen 800000 USD, all positions were sold, and approximately assets were stolen from a friend's account 600000 USD, and urged users to lock their accounts and refrain from interacting with the website for the time being. Multiple other users also reported on X and in the Polymarket Discord community that the website's front end was allegedly attacked and assets were transferred out without authorization. One user claimed approximately was stolen 200000 USD, while another said they received an unauthorized withdrawal-signing request on the official website. As of press time, Polymarket had not responded. This year June, Polymarket previously suffered a front-end phishing attack after a third-party vendor was compromised, resulting in approximately users' assets being stolen. 2940000 USD🔗https://www.panewslab.com/zh/articles/01a188d4-9af8-7402-94ae-0fec29ec2882
Key points
01
Polymarket trader Car said on X that approximately assets in their account were stolen 800000 USD, and all positions were sold.
02
Car said approximately was stolen from a friend's account 600000 USD, and urged users to lock their accounts and refrain from interacting with the website for the time being.
03
Multiple users reported on X and in the Polymarket Discord community that assets were transferred out without authorization and suspected that the website's front end had been attacked.
04
One user claimed approximately was stolen 200000 USD, while another said they received an unauthorized withdrawal-signing request on the official website.
05
As of press time, Polymarket had not responded.
06
The report mentioned that this year June, Polymarket previously suffered a front-end phishing attack after a third-party vendor was compromised, resulting in approximately 2940000 USD users' assets being stolen.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
Users' claims are that they did not actively consent, yet assets in their accounts were still sold or transferred; some also saw abnormal withdrawal-signing requests. This led some to suspect that the website's front end had been attacked, but the original text currently provides no official confirmation or technical investigation results.
Why it matters to readers
If these claims are accurate, user fund security and interaction with the platform may face risks. Abnormal signing requests warrant particular caution because confirming a signature may authorize asset operations.
Until the incident is confirmed and addressed, newcomers should exercise caution when interacting with the relevant website, avoid approving unknown withdrawal or signing requests, and monitor official responses.
Risks and unknowns
The reported loss amounts come from users' own statements and were not independently verified in the original text.
Whether the website's front end was in fact attacked has not been confirmed by official or technical sources.
The number of affected users, scope of the attack, specific cause, and current remediation status are unknown.
It remains unclear whether Polymarket will suspend its functions, recover the funds, or provide compensation.
the year mentioned in the original text June The event is not supported by further verification materials in this evidence.
Related Developments
Loading event timeline…
Related concepts
Website front end
This term is not in the glossary yet. Browse related concepts in the glossary.
