Polymarket Front-End Compromise Investigation

Polymarket’s official incident history records the following updates on October 29, 2026. All times below are UTC:

• 6:05 p.m.: Polymarket said the exchange was in cancel-only mode and relayer actions were paused while it investigated an incident.
• 6:37 p.m.: Polymarket said it had identified and fixed an issue affecting its international platform, attributed it to a compromised third-party provider, and referred the matter to law enforcement. It promised to make affected users whole and said trading was temporarily halted.
• 6:55 p.m.: A monitoring update announced an expected trading restart at approximately 3 p.m. Eastern Time.
• 7:05 p.m.: The status history marked the incident resolved.

These are the company’s status-update times, not a verified timeline of the attacker’s access or individual losses. A resolved service notice does not establish that every reimbursement is complete.

The cited incident updates do not identify the provider, explain the technical entry point, or quantify affected users or losses. Hall Attorneys has not independently verified individual wallet losses or the full scope of the compromise.

A promise to make affected users whole is not confirmation that each user has received payment or that every claimed loss is covered. We are reviewing reimbursement communications, amounts paid, outstanding balances, transaction costs, and other documented consequences.

You may contact Hall Attorneys if you are waiting for a response, were denied reimbursement, received only part of the amount you reported, or received a payment and still have questions. Preserve any terms, acknowledgments, or releases associated with an offer or payment.

A reimbursement does not automatically establish or eliminate a legal claim. Available remedies depend on the facts, applicable terms and law, and any payment or agreement. Hall Attorneys has not determined individual eligibility, legal responsibility, or compensation.

Keep saved images, transaction hashes or block-explorer links, account and position histories, wallet alerts, and records showing relevant dates, times, time zones, assets, and amounts. Preserve support tickets, incident notices, reimbursement communications, payments, expenses, and any terms you were asked to accept.

You do not need to reconnect a wallet, approve a transaction, or reproduce suspicious activity to document your concern. Start with records already in your possession and a description of what happened.

Do not send seed phrases, recovery phrases, private keys, passwords, API secrets, login links, verification codes, or wallet backup files. Polymarket’s own help center also instructs users to keep private keys private. Use independently verified official channels for account-support questions.