{
 "tag": "polycule",
 "name": "Polycule",
 "group": "Other",
 "incidents": [
  {
   "slug": "polycule-polymarket-telegram-bot-hack-jan-2026",
   "title": "Polycule, a Telegram trading bot for Polymarket, hacked for about $230K of user funds",
   "url": "https://drains.watch/i/polycule-polymarket-telegram-bot-hack-jan-2026",
   "json": "https://drains.watch/i/polycule-polymarket-telegram-bot-hack-jan-2026.json",
   "status": "closed",
   "severity": "high",
   "threatStatus": "contained",
   "verification": "verified",
   "chains": [
    "polygon"
   ],
   "method": "key-leak",
   "product": "Polycule Telegram trading bot users (Polymarket, Polygon)",
   "tags": [
    "polygon",
    "key-leak",
    "polycule",
    "polymarket",
    "telegram-bot",
    "custodial-bot",
    "trading-bot"
   ],
   "amountUsd": 230000,
   "victims": null,
   "startedAt": "2026-01-13",
   "closedAt": "2026-01-14",
   "updatedAt": "2026-01-14T12:00:00Z",
   "summary": "Polycule, a Telegram bot for trading on Polymarket, confirmed on 13 Jan 2026 that it had been hacked and that about $230,000 of user funds held in bot-managed Polygon wallets was taken. The team took the bot offline and promised a patch and compensation; no official root cause was published, and some rivals called it a rug pull. Custodial Telegram bots keep users' private keys on their own servers, so one breach can drain every user at once. Keep only small trading balances in any bot wallet."
  }
 ],
 "changes": [
  {
   "incident": "polycule-polymarket-telegram-bot-hack-jan-2026",
   "incidentTitle": "Polycule, a Telegram trading bot for Polymarket, hacked for about $230K of user funds",
   "severity": "high",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2026-01-14",
   "title": "Odaily published an ExVul Security analysis of the risks of custodial prediction-market bots.",
   "sourceUrl": "https://www.odaily.news/en/post/5208756",
   "url": "https://drains.watch/i/polycule-polymarket-telegram-bot-hack-jan-2026"
  },
  {
   "incident": "polycule-polymarket-telegram-bot-hack-jan-2026",
   "incidentTitle": "Polycule, a Telegram trading bot for Polymarket, hacked for about $230K of user funds",
   "severity": "high",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2026-01-13",
   "title": "Polycule confirmed its Telegram trading bot was hacked, about $230,000 of user funds lost; the bot was taken offline.",
   "sourceUrl": "https://www.odaily.news/en/post/5208756",
   "url": "https://drains.watch/i/polycule-polymarket-telegram-bot-hack-jan-2026"
  }
 ]
}