Polymarket said its international platform Polymarket.com was hit via a compromised third party provider on Oct 29, 2026, with law enforcement referred. post

Users reported unauthorized position sales and withdrawals, with claims including about $800k for one trader and about $2.65 million in POL cited in alerts. Unofficial reports blamed a hijacked DebugBear script and cancel only mode plus paused relayer actions. report

Polymarket said the issue was fixed and anyone impacted will be made whole, first halting trading then saying trading will resume at approximately 3pm ET and later that trading is now fully back online with full reimbursement. update

Cointelegraph summarized the same sequence: fixed issue, full make whole promise, temporary halt. post The named provider and total drained amount are not confirmed in official posts.