Markets › News › DeFi

Polymarket Suffers Major Hack, Nearly $2.6M Stolen from 995 Accounts

A security breach on Polymarket's platform resulted in the theft of $2.6 million from nearly 1,000 user accounts.

A security breach on Polymarket's platform resulted in the theft of $2.6 million from nearly 1,000 user accounts. This is an original TLT brief based on reporting by Crypto Economy, with live market data added, as of Thu, 29 Oct 2026 21:00:04 UTC.

Why it matters

The breach highlights vulnerabilities in decentralized platforms' security, especially when relying on third-party vendors, and raises concerns about user trust and asset safety in DeFi markets.

Key takeaways
  • 995 Polymarket accounts compromised in security breach.
  • $2.654 million stolen through unauthorized transfers and liquidations.
  • Attack executed via malicious script from third-party vendor.
  • Polymarket's Total Value Locked dropped 6.2% in 7 days to $351.72M.

Polymarket, a decentralized information markets platform, experienced a significant security breach on Thursday, resulting in the theft of approximately $2.6 million from nearly 1,000 user accounts. The breach occurred through a malicious script that was injected into the platform via a third-party vendor, compromising user wallets and enabling unauthorized transfers and forced liquidations.

According to reports from Crypto Economy and U.Today, the attack led to the compromise of 995 accounts, with the exact amount stolen being $2,654,211.42. This figure was corroborated by both outlets, although U.Today reported the amount as 'more than $2.6 million.' The breach has raised concerns about the security of decentralized platforms, particularly when they rely on third-party services.

The attack's impact on Polymarket is also reflected in the platform's Total Value Locked (TVL), which dropped by 6.2% over the past seven days to $351.72 million, as reported by DeFiLlama. This decline indicates a potential loss of confidence among users and investors following the security breach.

The broader cryptocurrency market has also been experiencing a downturn, with the total market cap currently at $2.77 trillion and Bitcoin down 1.23% in the last 24 hours. The Fear & Greed Index stands at 51, indicating a neutral market sentiment. This context suggests that while the market is not in a state of panic, the breach has added to the existing uncertainty.

The incident underscores the importance of security measures in the DeFi space and the need for platforms to ensure robust protection against third-party vulnerabilities. As Polymarket investigates the breach, users and investors will be watching closely to see how the platform responds and what measures are implemented to prevent future incidents.

The market when this published · October 29, 2026
Total market cap$2.77T
Bitcoin 24h-1.23%
Ethereum 24h-2.23%
BTC dominance58.6%
Fear & Greed51 · Neutral
Cross-source data check

1 key figure independently matched across 2 outlets reporting this story.

$2.6M2× corroboratedCrypto Economy, U.Today

TLT extracts the figures each outlet reports and flags the ones that agree. Numbers cited by only one outlet are attributed in the brief, not shown as corroborated.

On-chain & primary-source check

Figures and sectors in this story, checked live against on-chain aggregators · October 29, 2026.

Polymarket TVL$351.72M-6.2% 7dDeFiLlama ↗
Bitcoin DeFi TVL$6.23BDeFiLlama ↗

TLT reads these figures directly from on-chain aggregators (DeFiLlama, mempool.space) at build time — independent of what any outlet reported. Sector totals aggregate every protocol DeFiLlama tracks in that category. Values are live and will change.

Polymarket Suffers Major Hack, Nearly $2.6M Stolen from 995 — questions & answers

How many accounts were affected by the Polymarket hack?

995 user accounts were compromised in the security breach.

How much money was stolen in the Polymarket hack?

The exact amount stolen is $2,654,211.42, according to Crypto Economy.

What caused the security breach on Polymarket?

The breach was caused by a malicious script injected through a third-party vendor.

Which outlets reported this story?

This is an original TLT brief that synthesises reporting from Crypto Economy. It is not a copy of any one article — follow the source links above for the original reporting.

TLT Newsdesk Data-stamped

TLT's newsdesk writes original briefs by synthesising coverage from across the crypto press — 50+ outlets including CoinDesk, The Block, Decrypt and Cointelegraph — cross-checking the figures they report — and verifying them against on-chain data from DeFiLlama and mempool.space — plus live market context (CoinGecko, Binance). We summarise and link to every source; we never reproduce full articles. Read our editorial standards and how we use AI. Not financial advice.

Market data verified against CoinGecko & Binance · October 29, 2026 ⛓ Timestamped at Bitcoin block #973,731 sha256:927d6577d1dbf681
Based on reporting by Crypto Economy — this is an original TLT summary with live market data, not the original article.Crypto Economy · Oct 29 20:04 ↗

Original summary — not financial advice. This is an original TLT brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.