Polymarket Halts Trading After Vendor Exploit Drains $2.6M

Vendor Security Failure Halts International Trading

Polymarket suspended order creation across its international exchange Thursday morning following unauthorized account activity that drained approximately $2.65M in digital assets from platform users. According to incident disclosures released by the company, the exploit originated from a compromised third-party service provider rather than any core infrastructure failure. Platform operators immediately instituted a cancel-only mode. This emergency restriction allowed participants to clear open orders while blocking new position entries.

Building on prior security breaches across the digital asset sector, such as CoinDCX confirming a financial loss of 15.99M USDT tied directly to compromised operational wallet infrastructure earlier this month in October 2026, the attack highlights ongoing vulnerabilities in third-party integrations. Polymarket engineering teams paused relayer functions while isolating the exploited vector. Company representatives confirmed the vulnerability patch went live hours after the initial breach detection. Executives escalated the digital theft case directly to federal law enforcement authorities.

OnChain Trackers Map Stolen Token Swaps

Blockchain monitoring tools deployed by Arkham mapped suspicious wallet activity immediately following the initial user complaints. Public transaction records confirm the attacker routed stolen USDC through Relay to accumulate roughly $2.65M worth of POL tokens. Independent on-chain investigators verified the aggregate loss figures. Several affected traders published individual account depletion claims directly on social media networks, including one single user reporting an $800,000 loss.

Liquidity vanished instantly. Order books thinned across major prediction pairs as market makers pulled bids to reassess counterparty risk. Polymarket publicly committed to executing full financial reimbursements for every trader impacted by the vendor security failure. Platform executives stated that corporate reserves will cover the entire deficit without tapping user collateral pools. Traders took immediate notice.

Escrow Dilution Overwhelms Daily Retail Demand

Supply dynamics dictate the ongoing stagnation of the digital asset market. Ripple releases 1,000,000,000 tokens from escrow on the first day of every month, returning roughly 80.00% to lockup while funneling 200,000,000 to 300,000,000 coins directly to institutional desks via over-the-counter channels. This constant dilution swamps retail demand, preventing organic order books from building the momentum required to challenge macro resistance levels.

Federal Reserve interest rate policy exacerbates this dilution by keeping capital costs elevated across traditional financial markets. Institutional allocators prefer yield-bearing treasury instruments over non-yielding digital assets during periods of tight monetary policy. Spot liquidity remains thin, leaving order books vulnerable to sudden liquidity drains whenever broader crypto market sentiment dips.