Polymarket Exploit on Polygon: $600K Drained from Internal Wallet via Private Key Compromise – User Funds Remain Safe

Posted by Enat Digital
Polymarket: $600K Drained on Polygon

On-chain analysts ZachXBT and Bubblemaps raised alarms after detecting suspicious outflows from a Polymarket-linked contract on Polygon. The incident involved repeated transfers of ~5,000 POL every 30 seconds, resulting in losses estimated between $520,000 and $700,000.

Polymarket quickly confirmed this was not a smart contract exploit but a private key compromise of an internal operations wallet. User funds, market resolutions, and core platform infrastructure remain fully unaffected.

What Happened in the Polymarket Polygon Incident?

Blockchain investigator ZachXBT first flagged the activity, identifying the attacker address as 0x8F98075db5d6C620e8D420A8c516E2F2059d9B91. The drains targeted addresses linked to Polymarket’s UMA CTF Adapter on Polygon.

Bubblemaps amplified the alert with visual transaction data showing automated, high-frequency withdrawals. At the time, losses had reached around $600,000, with funds later split across multiple addresses. The repetitive pattern suggested scripted automation.

Polymarket’s Official Response

Polymarket’s protocol and engineering teams responded swiftly:

  • Shantikiran Chanal (Protocol team): “User funds and market resolution are safe. Findings point to a private key compromise of a wallet used for internal operations.”
  • Josh Stevens (VP of Engineering): Confirmed it involved a legacy private key. The affected wallet was part of an internal refiller service.

The team immediately rotated the compromised address, revoked permissions, and stopped the outflows.

Key Takeaways and Security Implications

  • User Impact: None. Trading continues normally.
  • Root Cause: Private key management issue with a legacy operational wallet.
  • Response Speed: On-chain detectives and Polymarket contained the incident within hours.
  • Broader Context: Highlights ongoing operational security risks in DeFi.

Will This Affect Polymarket Users or Markets?

No. Polymarket has confirmed:

  • Core smart contracts remain secure
  • Market settlements via UMA are intact
  • User-deposited funds were never exposed

This was an operational wallet issue, not a vulnerability in audited contract code.

Stay Updated

Follow official Polymarket channels and analysts like ZachXBT for further developments. As of now, the platform operates as usual and affected systems have been secured.

This article is for informational purposes only and does not constitute financial advice. Crypto assets involve risk.

Share this post:

Comments

Post a Comment