{"id":92581,"date":"2025-12-24T13:32:26","date_gmt":"2025-12-24T10:32:26","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=92581"},"modified":"2025-12-24T13:35:11","modified_gmt":"2025-12-24T10:35:11","slug":"polymarket-confirms-user-account-breach","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/polymarket-confirms-user-account-breach\/","title":{"rendered":"Polymarket Confirms User Account Breach"},"content":{"rendered":"

The prediction platform Polymarket has confirmed<\/a> that several users have been affected by a breach linked to a vulnerability at a third-party provider.<\/p>\n

This week, social media saw a surge of reports from users complaining about unauthorized login attempts and zeroed balances.<\/p>\n

\n

“I woke up today to find three attempts to log into my <\/em>Polymarket<\/em><\/a> profile. My device is uncompromised, Google found nothing suspicious, and all other services are fine. I logged into the platform and saw all my trades closed, with a balance of $0.01,” wrote one of the platform’s clients on Reddit.<\/em><\/p>\n<\/blockquote>\n

Another affected user reported receiving a series of login attempt notifications, followed by the disappearance of funds. The user emphasized not clicking on any suspicious links and using two-factor authentication.<\/p>\n

Comments suggest the issue affected Polymarket clients using the Magic Labs service, which allows email logins and creates non-custodial Ethereum wallets. This method is most popular among novice crypto investors.<\/p>\n

\n

“We recently discovered and resolved a security issue affecting a small number of users. The issue was caused by a vulnerability introduced by a third-party authentication provider,” Polymarket stated.<\/em><\/p>\n<\/blockquote>\n

The platform did not disclose the exact number of affected users, the amount of damage, or the name of the provider that was the source of the problem.<\/p>\n

This is not the first such incident at Polymarket. In September 2024, several users logging in via Google fell victim to complete wallet depletion.<\/p>\n

Perpetrators used proxy function manipulations to automatically withdraw USDC<\/a> to their addresses. The platform’s investigation revealed that the vulnerability was also linked to third-party authentication providers.<\/p>\n

In November 2025, scammers launched<\/a> a large-scale phishing campaign in Polymarket’s comment section. The scammers spread phishing links disguised as official resources, extracting credentials from victims. The damage from this scheme exceeded $500,000.<\/p>\n

Earlier, Polymarket resumed<\/a> operations in the US after resolving a conflict with the local regulator.<\/p>\n","protected":false},"excerpt":{"rendered":"

The prediction platform Polymarket has confirmed that several users have been affected by a breach linked to a vulnerability at a third-party provider.<\/p>\n","protected":false},"author":1,"featured_media":92582,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"Polymarket confirms user breach due to third-party vulnerability.","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1154,1148],"class_list":["post-92581","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-crimes","tag-polymarket"],"aioseo_notices":[],"amp_enabled":true,"views":"304","promo_type":"1","layout_type":"1","short_excerpt":"Polymarket confirms user breach due to third-party vulnerability.","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/92581","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=92581"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/92581\/revisions"}],"predecessor-version":[{"id":92583,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/92581\/revisions\/92583"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/92582"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=92581"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=92581"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=92581"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}