Skip to content
Sign in
Technology · Europe

A security incident drains $2.65 million from Polymarket users as trading stops

A security incident involving a third-party provider led to $2.65 million being taken from Polymarket users’ wallets, prompting the company to halt trading on its international platform. Trading resumed about an hour later, and Polymarket said it would reimburse affected traders.

AI-assisted synthesis · Based on 5 outlets' reporting · Article text read from 2 of 5 outletsHow it's made

View timeline · 7 entries
5 outlets2 regionsLatest reporting 2 min read
Coverage: MixedL 1 · C 3 · R 1
Updat3 graphic: Forbes Polymarket
Updat3 graphic

What happened

Key facts

  • Polymarket halted trading on its international platform after a security incident involving a compromised third-party provider (per Washington Examiner, abcnews.com, The Guardian).
  • The incident led to $2.65 million being taken from users’ wallets within minutes (per Washington Examiner).
  • The Wall Street Journal reported that the affected provider was Debugbear, a vendor Polymarket used to monitor platform performance (per Washington Examiner).
  • Debugbear said its real user monitoring product was affected by a security incident (per Washington Examiner, abcnews.com).
  • Polymarket paused trading for about an hour, then resumed it Thursday afternoon (per Washington Examiner, abcnews.com).
  • The incident occurred around 2:30 p.m. and was resolved within an hour (per Washington Examiner).
  • Multiple reports found that more than $2.5 million was taken through over 900 transactions (per Washington Examiner).
  • Polymarket said it would fully reimburse affected traders (per Washington Examiner, abcnews.com, Forbes).
  • Polymarket said it referred the incident to relevant law enforcement (per Washington Examiner).

The brief

A security incident involving a third-party provider led to $2.65 million being taken from Polymarket users’ wallets, and the prediction-market company halted trading on its international platform. Polymarket said it paused trading after identifying an issue affecting that platform and later reported that it had fixed the issue.

The company’s statement linked the incident to a compromised provider. The interruption lasted about an hour, with trading resuming Thursday afternoon. Polymarket said the pause was taken “out of an abundance of caution” and promised to fully reimburse affected traders. The company also said it had referred the incident to relevant law enforcement.

The Washington Examiner reported that the incident occurred around 2:30 p.m. and was resolved within an hour. It also said multiple reports counted more than $2.5 million taken through over 900 transactions. Its account put the total at $2.65 million and said the money was taken from users’ wallets within minutes.

The Wall Street Journal identified the provider as Debugbear, which Polymarket used to monitor platform performance, according to the Washington Examiner. Debugbear said its real user monitoring product was affected by a security incident.

ABC News reported that Debugbear’s website was unavailable Thursday afternoon and that the company described itself on X as affected by an ongoing security incident. Debugbear said impacted users would be made whole.

The two detailed accounts emphasize different parts of the incident: the Washington Examiner gives the dollar amount, transaction count and approximate time, while ABC News describes the trading pause as a precaution and includes Debugbear’s statement about affected users.

Both report the interruption and Polymarket’s reimbursement pledge; the Guardian, Forbes and Yahoo Finance Canada also reported the suspension or provider-related incident in their headlines. The incident connects a disruption to Polymarket’s international trading platform with a security problem affecting a vendor’s monitoring product.

The reports establish the company’s account of the provider compromise and the funds taken, but they do not describe how the transactions were carried out or identify who took the funds. Polymarket’s stated next steps are reimbursement of affected traders and referral to law enforcement; Debugbear also said affected users would be made whole.

Why it matters

  • Polymarket users bear the direct financial cost: $2.65 million was taken from their wallets, with more than 900 transactions reported.
  • Users also faced a trading interruption on Polymarket’s international platform, which paused trading for about an hour.
  • Polymarket said it would fully reimburse affected traders, while Debugbear said impacted users would be made whole; those commitments address the reported wallet losses.

What to watch next

  • Whether Polymarket completes its stated reimbursement of affected traders.
  • Whether Debugbear follows through on its statement that impacted users would be made whole.
  • What relevant law enforcement does after Polymarket said it referred the incident to them.

How it's being covered

Coverage analysisShow details
6 source articles · 5 unique outlets
Outlet political mix: Mixed· 1 Left · 3 Center · 1 Right
Where the outlets are based: US/Canada 80% · Europe 20%
Outlet political mix
Mixed
Left
Center
Right
1 outlet
3 outlets
1 outlet
The marker shows coverage balance: each unique outlet counts once.
Geography
Where the outlets covering this story are based.
5 unique outletsDominant coverage: US/Canada
Coverage imbalance
  • Coverage is currently concentrated among outlets based in US/Canada (4 of 5 geographically-identified sources).
How we measure coverage

How outlets' accounts compare

2 framing differences · 2 uncorroborated claims · 2 information gaps
The reports repeat the same account with different emphasis; its central claims are not independently confirmed in the reporting Updat3 read.Compared across 2 reports whose article text Updat3 read; 3 other outlets were checked by headline only.
Framing / emphasis differences
Sources emphasise different angles, actors or consequences of the same reporting.
  • ABC News reports that Polymarket halted trading “out of an abundance of caution”; the Washington Examiner foregrounds the $2.65 million taken and the provider compromise.
  • Polymarket attributed the incident to a compromised third-party provider; Debugbear separately said its real user monitoring product was affected by a security incident.
Updat3: These are differences of emphasis, not disputes about what is reported. They do not show that the reported claims are true.
One-sided or uncorroborated claims
Claims that come from one party or one source family and are not independently corroborated.
  • Polymarket said it would “make this right” and fully reimburse affected traders.
  • Debugbear said impacted users would be made whole.
Updat3: Not independently corroborated yet — treat as a claim, not an established fact.
Not established by the reporting
Information the available reporting does not contain or confirm. This is a gap, not a disagreement.
  • The accounts do not provide a breakdown of the $2.65 million by affected user.
  • The accounts do not identify who took the funds or explain the transaction mechanics.
Updat3: Updat3 cannot conclude anything about this from the current sources.

Timeline

Developments from this story's sources, dated background we compiled and fact-checked, and our earlier coverage. Each row says which.
  1. The platform had launched in 2020, offering markets whose outcomes could be resolved using blockchain-based mechanisms.
    Background · from our historical context
  2. In 2021, Polymarket moved its markets to Polygon, a network built to support transactions compatible with Ethereum, and used USDC, a dollar-pegged stablecoin, for trading.
    Background · from our historical context
  3. The CFTC ordered Polymarket to pay a $1.4 million penalty and wind down unregistered markets.
    Background · compiled and fact-checked by Updat3
  4. Polymarket users traded contracts on the U.S. presidential election.
    Background · compiled and fact-checked by Updat3
  5. The FBI searched Polymarket CEO Shayne Coplan’s home as part of a federal investigation.
    Background · compiled and fact-checked by Updat3
  6. Polymarket acquired the U.S. derivatives exchange QCEX.
    Background · compiled and fact-checked by Updat3
  7. Polymarket paused trading for about an hour, then resumed it Thursday afternoon.
    Reported in this story's sourcesSource:abcnews.com

How we got here

Polymarket’s growth into a high-volume prediction market was especially visible during the 2024 U.S. presidential election, when users traded contracts on the outcome. The platform had launched in 2020, offering markets whose outcomes could be resolved using blockchain-based mechanisms.

In 2021, Polymarket moved its markets to Polygon, a network built to support transactions compatible with Ethereum, and used USDC, a dollar-pegged stablecoin, for trading. A separate regulatory constraint took shape in January 2022, when the U.S.

Original sources

1 of 6 articles · Europe · Show all

Every story links to the reporting it was built from. How we choose sources

Spotted a factual error, a broken link or a misleading summary? Tell us.