Polymarket's international site polymarket.com was hit through a compromised third party script on Oct 29, with users reporting drained wallets and forced position sales from about 17:45 UTC.

Polymarket's international site polymarket.com was hit through a compromised third party script on Oct 29, with users reporting drained wallets and forced position sales from about 17:45 UTC.

Trader Car reported about $800k drained, other users reported six-figure losses, and circulating posts put total losses around $2.6-2.68M to alleged attacker 0x3F99…fc18. Those totals are user claims, not verified onchain totals.

Polymarket moved to cancel-only mode and paused relayer actions while investigating, per a Discord forward quoted here.

Polymarket then said it identified and fixed an issue impacting polymarket.com, that one third-party provider was compromised and referred to law enforcement, trading temporarily halted, and anyone impacted will be made whole. Cointelegraph relayed the same update.

Do not open the site, connect, or sign anything until Polymarket posts an all-clear.