Multiple Polymarket user accounts experienced unauthorized asset transfers, suspected to be due to a front-end attack.
Multiple Polymarket users reported on the X platform and Discord community that their account assets were transferred out without authorization, suspected to be due to a website front-end attack. Trader Car stated that approximately $800,000 was stolen from his account, all his positions were sold, and his friend's account was stolen from approximately $600,000, prompting him to warn users to lock their accounts. Another user reported a loss of approximately $200,000 and received unauthorized withdrawal signature requests on the official website. As of press time, Polymarket has not responded. In June of this year, Polymarket suffered a front-end phishing attack due to a third-party vendor intrusion, resulting in the theft of approximately $2.94 million in user assets.