Polymarket’s $700K Oopsie: When Private Keys Go Public

by

So, ZachXBT, the Sherlock Holmes of blockchain, spots a hack and screams, “They’re draining the pool!” Polymarket’s like, “Relax, it’s just an internal wallet. User funds? Safe. We’re basically Fort Knox with a Wi-Fi connection.”

  • Key Takeaways (because who doesn’t love a good list?):

  • Hackers stole $700K in POL. Apparently, a 6-year-old private key was the weak link. Who knew keys had expiration dates?
  • ZachXBT: “Hey, your wallet’s leaking!” Polymarket: “Thanks, Captain Obvious. User funds? Still dry.”
  • Solution? Move all private keys to KMS. Because, you know, hindsight’s 20/20.

Polymarket’s Security Event: More Drama Than a Soap Opera

Polymarket, the prediction market giant, had a little “oopsie” moment. Turns out, their admin address on Polygon got compromised. Friday night, ZachXBT’s like, “Uh, guys? Funds are disappearing faster than my will to live.”

According to Bubblemaps, the hackers were on a shopping spree, withdrawing 5,000 POL every 30 seconds. Split across 16 addresses? That’s not a heist; that’s a Black Friday sale. Total damage? $700K. Someone’s getting coal in their stocking.

Polymarket’s Shantikiran Chanal chimes in, “Yeah, we saw the reports. User funds? Safe. Just an internal wallet. No biggie.” Internal wallet? More like internal embarrassment.

“Private key compromise? Check. Wallet for internal ops? Check. Contracts or core infrastructure? Nah, we’re good there.” Basically, they left the back door open and are now blaming the wind.

In April, Polymarket hit 9 billion in trading volumes. So, yeah, an exploit could’ve been a disaster. But hey, at least they’re rotating keys now. Better late than never, right?

Josh Stevens, VP of Engineering, drops the post-mortem: “6-year-old private key? Compromised. Internal top-up config? Oops. Rotated the key, revoked permissions, and moving all PKs to KMS. Crisis averted. Maybe.”

“No contracts exploited. User funds safe. Business as usual.” Translation: “We messed up, but hey, at least we’re not bankrupt. Yet.”

Read More

2026-05-22 18:30