Polymarket Funds Theft of $2.7M Linked to DebugBear Hack
Published on · Source: cnbc.com

AI Summary
Summarized by AI from the source belowSome users of Polymarket's international prediction market exchange had funds stolen due to a hack involving a third-party provider, DebugBear. Account holders experienced unauthorized withdrawals totaling at least $2.7 million across 710 wallets. Polymarket's U.S. platform was not affected.
The company halted trading on its international platform on the afternoon of October 28, 2026, and resumed trading at 3:00 p.m. Eastern Time after fixing the issue. Polymarket referred the matter to U.K. law enforcement because DebugBear, the affected website performance monitoring platform, is based in the U.K. DebugBear confirmed a security incident occurred on October 28.
This breach comes days before increased trading volume is expected for the November 3 U.S. midterm elections. Polymarket operates its international exchange as a decentralized finance platform on the polygon blockchain and is not regulated in the U.S. Polymarket pledged to reimburse traders impacted by the hack.
This event highlights risks from third-party providers in decentralized finance platforms. For investors, the reimbursement pledge and Polymarket's rapid response mitigate direct losses, but the total stolen funds reaching $2.7 million underscores vulnerabilities in platform security linked to external services.
Informational only, not financial advice. Content is AI-generated and may contain errors. How this works.
Our take
Opinion from the Newsstocks AI desk, not investment adviceWe think the incident reveals the risks decentralized finance platforms face when relying on external providers. Polymarket's quick resolution and commitment to reimburse traders help contain damage, but the theft of $2.7 million highlights significant security concerns. Continued issues with third-party dependencies could affect user confidence in the platform.
Key numbers
- Stolen funds
- $2.7 million
- Affected wallets
- 710
- Trading resumed
- 3:00 p.m. ET
What could help
- Polymarket pledged to reimburse all impacted traders, reducing potential losses.
What could hurt
- The hack exposed vulnerabilities in third-party provider services impacting fund security.
- The incident occurred shortly before expected high trading volumes during U.S. midterm elections.
The background
Decentralized finance platforms allow users to trade without intermediaries but depend on third-party services which can be security risks. Hacks can cause unauthorized fund withdrawals and impact user trust.
Questions readers ask
How were funds stolen from Polymarket users?
User funds on Polymarket's international platform were stolen due to a hack of DebugBear, a third-party website performance monitoring platform used by Polymarket.
What actions has Polymarket taken after the hack?
Polymarket halted trading on its international platform, fixed the issue, resumed trading the same day at 3:00 p.m. ET, contacted law enforcement in the U.K., and pledged to reimburse impacted traders.
Understand this kind of story
Get the weekly market brief
One email every Monday: what moved, why, and what to watch. Free, unsubscribe anytime.
Get stories like this as they break
Our Telegram channel posts every market story the moment it is published. Free, and you can mute or leave anytime.



