The tweet was deleted by the author.
But we saved everything 🙂.
Prediction market platform Polymarket said a phishing attack resulted in the theft of $2.94 million from users. The company said it has contained the incident and will fully reimburse everyone affected.
According to the team, the attackers compromised a third-party vendor before injecting a malicious script into the platform's frontend. Blockchain analyst Specter said the attack drained funds from at least 11 user wallets.
Polymarket said the vulnerability has been fixed and the compromised component has been completely removed from its systems.
As of publication, Polymarket had not commented further on the attack or identified the third-party provider whose compromise enabled the theft of user funds.
According to DefiLlama, the incident became the 89th recorded crypto hack of the second quarter of 2026, marking the highest quarterly number of attacks ever recorded in the industry.
Compromised private keys accounted for roughly 43% of all losses over the past 30 days, making them the leading cause of stolen funds. The month's largest incidents included the $36 million Humanity Protocol hack, the $4.7 million exploit of the Secret Network bridge, and two separate Aztec exploits that each resulted in losses of $2.1 million.
Earlier, Binance Research reported that a series of major hacks in April triggered approximately $13 billion in capital outflows from the decentralized finance (DeFi) sector.