ZachXBT flags $520K Polymarket exploit on Polygon, team says funds are safe

2 weeks ago

Blockchain researcher ZachXBT has highlighted a suspected information breach involving Polymarket, the world’s largest decentralized prediction marketplace platform.

Updated May 22, 2026, 9:40 a.m. Published May 22, 2026, 9:39 a.m. 1 min read

Blockchain researcher ZachXBT has highlighted a suspected information breach involving Polymarket, the world’s largest decentralized prediction marketplace platform.

Over $520,000 was reportedly drained from 2 astute contracts connected the Polygon blockchain, according to on-chain information shared by ZachXBT. The affected addresses are 0x871D7c0f9E19001fC01E04e6cdFa7fA20f929082 and 0x91430CaD2d3975766499717fA0D66A78D814E5c5, with funds allegedly sent to attacker code 0x8F98075db5d6C620e8D420A8c516E2F2059d9B91.

Polymarket developers said the institution is alert of reports tied to its rewards payout strategy successful a station connected X. The squad emphasized that idiosyncratic funds and marketplace resolutions stay safe, describing the contented arsenic a backstage cardinal compromise of an interior operations wallet alternatively than a broader astute declaration exploit oregon halfway infrastructure breach. Further updates are expected.

Polygon Labs' CTO Mudit Gupta besides commented connected the incident, stating:
“Polymarket contracts are safe. User funds are safe. Looks similar their marketplace initializer was compromised. No interaction to the users oregon the contracts.”

Polymarket has not yet issued an authoritative connection from its main X account. CoinDesk has reached retired to the institution for further comment. The incidental comes amid heightened scrutiny of decentralized concern platforms.

Investigations by ZachXBT Investigations by ZachXBT
View source