finance
Polymarket Reports $520,000 Drained From Polygon Smart Contracts
Blockchain investigator ZachXBT reported that more than $520,000 was moved from two Polymarket smart contracts on the Polygon network. Polymarket said the incident involved a private key compromise of an internal operations wallet and that user funds and market resolutions remain unaffected.
May 22, 5:39 AM·1m read1 source
CoinDeskAudio version
Tap play to generate a narrated version.
Developing·Limited corroboration so far. This page will refresh as more sources emerge.
Blockchain investigator ZachXBT reported that more than $520,000 was drained from two Polymarket smart contracts on the Polygon blockchain. The affected addresses are 0x871D7c0f9E19001fC01E04e6cdFa7fA20f929082 and 0x91430CaD2d3975766499717fA0D66A78D814E5c5, with funds sent to attacker address 0x8F98075db5d6C620e8D420A8c516E2F2059d9B91.
Polymarket developers said the incident stemmed from a private key compromise of an internal operations wallet tied to its rewards payout system. The team stated that user funds and market resolutions remain safe and described the event as limited to the operations wallet rather than a broader smart contract exploit.
Gupta stated that Polymarket contracts and user funds are safe. Gupta said the compromise appeared limited to the market initializer with no impact to users or the contracts. Polymarket has not issued an official statement from its main X account. CoinDesk has reached out to the company for additional comment.
Transparency
How sources framed this
Single source — no framing comparison available.
CorroborationModerate · 1 source
