Polymarket Restores Trading After Provider Security Incident

Polymarket restored trading on its international platform on October 29 after temporarily restricting new orders during an investigation into a security incident involving a third-party provider. The company said it had fixed the issue and would reimburse users who were affected. The platform’s status notice placed its Predictions Trading API in a major outage and put the exchange in cancel-only mode. Users could cancel existing orders, but new orders and trades were not processing. Polymarket also paused relayer actions, which facilitate transactions for users. The company’s notice recorded the disruption at 18:05 UTC. Polymarket said the provider had been compromised and that it had referred the matter to law enforcement. A source familiar with the incident identified the provider as DebugBear. The company did not publicly detail the technical path of the incident or say how many users were affected. DebugBear said it was affected by an ongoing security incident and advised customers using its real-user monitoring product to remove embedded code from their websites. Hudson Rock researchers said a script served by DebugBear searched for active trading sessions and attempted...