A third-party vendor has been compromised, and some Polymarket users have lost money to hackers, according to a tweet from the betting site. The company has not confirmed how much was lost, though independent monitors on X suggest it could be around $3 million.
“This morning we discovered a 3rd party vendor had been compromised, injecting a malicious script into our frontend for some users. We’ve contained it & removed the affected dependency,” Polymarket wrote on X. “We’re contacting impacted users & refunding them in full.”
One X account that claimed there were about “$3 million in losses” saw a response from Polymarket’s head of experience, William LeGate, who tweeted: “We are refunding affected users in whole, there are no user ‘losses’.” And while that’s not exactly confirmation that it’s $3 million, it’s hard not to conclude the amount lost to hackers was in the millions.
LeGate responded to another X account that tweeted about the hackers, saying “estimated losses of $2.94M so far.” That account, which monitors blockchain transactions, claims there are at least 11 victims who had PUSD, Polymarket’s stablecoin, drained from their wallets. That was then swapped for Ethereum to launder the crypto, according to the account, which provided wallet addresses for the allegedly stolen funds.
It appears there may be a phishing attack targeting Polymarket users, with estimated losses of $2.94M so far.
The attacker has drained funds from 11+ victim wallets holding PUSD, swapped the stolen assets for ETH, and consolidated the proceeds into the following address:… pic.twitter.com/6WfS0JhdDG
— Specter (@SpecterAnalyst) June 25, 2026
Addressing that account, LeGate insisted, “We’ve resolved the issue & are refunding affected users in full.”
Polymarket has been riding high on social media this week after an ad featuring music producer Rick Rubin received praise from names like CNBC’s Andrew Ross Sorkin.
It is rare for an ad to stop me these days. This one stopped me cold. Whatever your view of prediction markets — and this is not an endorsement — the team behind this ad created something genuinely remarkable. 👏👏👏 https://t.co/4EdgTfubEh
— Andrew Ross Sorkin (@andrewrsorkin) June 24, 2026
The praise was desperately needed by the company after a recent investigation by the Wall Street Journal found that social media has been flooded with deceptive videos appearing to show people winning big money on Polymarket. Creators were paid to make it look like they won hundreds of thousands of dollars, but it wasn’t real. Polymarket reportedly made “near-perfect copies of its website” where creators could make fake trades and appear to win. But none of it was real.
Polymarket didn’t immediately respond to questions emailed on Thursday about the hackers who may have taken $3 million. Gizmodo will update this article when we hear back.
