Polymarket Restores Trading After Third-Party Security Incident

Polymarket restored trading on its international exchange on October 29 after pausing activity for about an hour in response to a security incident involving a compromised third-party provider. The company said it had fixed the issue, referred it to law enforcement and would reimburse affected traders. The exchange entered cancel-only mode at 18:05 UTC, allowing users to cancel existing orders while new trading was halted. Polymarket also paused relayer actions, which submit transactions for users. Its status history marked the incident resolved at 19:05 UTC, and the company said trading was back online shortly afterward. Blockchain analysts estimated that about $2.7 million was withdrawn from user wallets. Betting Intelligence and Polysights traced at least that amount across 710 wallets, while Bubblemaps estimated roughly $2.7 million and about 700 affected users. Those figures are estimates, not a confirmed total of losses or a verified count of affected traders. Polymarket has not published either figure. Security researchers at Hudson Rock said a malicious JavaScript file associated with DebugBear’s Real User Monitoring service was designed to access authenticated trading...