Polymarket announced it will refund users whose cryptocurrency was stolen in a recent hack, according to reporting from PCMag. One analyst estimated the theft at nearly $3 million.
The attack vector appears to be phishing, the most direct method for bypassing wallet security by compromising user credentials or authentication methods rather than finding flaws in the platform itself. Phishing campaigns typically lure users to fake login pages or trick them into revealing seed phrases or private keys through fraudulent messages.
The refund announcement signals Polymarket's decision to absorb losses rather than leave users without recourse. The platform has not publicly disclosed the exact number of affected accounts, the timeline of the breach, or the total value of stolen funds beyond the analyst's estimate.
Crypto platforms face constant pressure to restore user confidence after security incidents. Refund commitments, while reassuring to victims, raise questions about insurance coverage, reserve funds, and whether Polymarket has identified how attackers gained access to the wallets in the first place.
No details have emerged about law enforcement involvement or whether the stolen funds have been tracked on-chain.