Polymarket incident
Security incident - 3rd party vendor compromised
Resolved after 37 minutes, affecting Polymarket Web App and Account Access & Authentication, on October 29, 2026.
$34
Affected components
Update timeline
- identified Oct 29, 2026, 05:38 PM UTC
We’ve identified unauthorized activity affecting user wallets. The team is investigating, and we’ll share updates here as we learn more.
- resolved Oct 29, 2026, 06:06 PM UTC
This incident is resolved. A third-party vendor whose script loaded on [Polymarket.com](http://Polymarket.com) was compromised. The attacker replaced the script with one built to target Polymarket users. For some users who had the site open during a short window on Oct 29, it used their active session to sell positions and move funds out of their wallets. Full write-up:
- investigating Oct 30, 2026, 08:07 PM UTC
$34
Your product runs on more than Polymarket
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services