Polymarket
2 incidents, 0 live. 119 days since the last new one.
2 drains in the last 12 months
2 drains in the last 12 months
2 drains in 2026
Past
June 2026 1
-
Critical✓Contained
Polymarket front-end compromised through third-party vendor; about $3M of users' pUSD drained
Polymarket disclosed on 25 June 2026 that a breached third-party vendor let attackers inject malicious code into its website for some users. Users who interacted with the compromised front-end had their pUSD (Polymarket's USDC-backed stablecoin) drained; Bubblemaps estimated about $3M taken from fewer than 15 users, and the funds were converted to ETH. Polymarket removed the code and says it will fully refund affected users.
Polymarket web app users·Polygon, Ethereum·$3.0M stolen·Since Jun 25, 2026·
January 2026 1
-
High✓Contained
Polycule, a Telegram trading bot for Polymarket, hacked for about $230K of user funds
Polycule, a Telegram bot for trading on Polymarket, confirmed on 13 Jan 2026 that it had been hacked and that about $230,000 of user funds held in bot-managed Polygon wallets was taken. The team took the bot offline and promised a patch and compensation; no official root cause was published, and some rivals called it a rug pull. Custodial Telegram bots keep users' private keys on their own servers, so one breach can drain every user at once. Keep only small trading balances in any bot wallet.
Polycule Telegram trading bot users (Polymarket, Polygon)·Polygon·$230K stolen·Since Jan 13, 2026·
No drains match these filters.