Polymarket halted trading on its international platform on Thursday after users reported money leaving their accounts without approval, CoinDesk reports. The company said one of its third-party providers had been compromised.
DeFi Llama tracked about $2.7 million in losses. CoinDesk confirmed that users with balances on the international platform saw their accounts drained.
Polymarket’s status page said it had identified and fixed the issue and referred the matter to law enforcement. It also said users would be made whole.
This is the second such incident this year. A breach in June cost about $3 million and involved a different third-party vendor, which affected the site’s front end.
The company has not named either provider in the reports seen so far, which leaves users unable to judge whether the two incidents share a cause. Nor has it said how many accounts were affected, how the reimbursement will work, or when trading will return.
The breach landed on the same day as Binance’s far larger one. Nothing in the reporting links the two, and the sums are of a different order. The pattern is nonetheless the same, with the weak point sitting at a vendor or a laptop rather than in a smart contract.
The report does not say whether Polymarket’s US platform was touched. Neither CoinDesk nor Polymarket has said what the intruders could reach once inside. Until the provider is named and the cause explained, the promise to make users whole is a statement of intent, not a count.
