Security incident · 2026-10-29
Polymarket International
According to the public DefiLlama incident dataset, Polymarket International (Polygon) suffered a security incident on 2026-10-29, with about $2.7M reported lost.
| Date | 2026-10-29 |
|---|---|
| Reported loss | $2.7M |
| Chain | Polygon |
| Target type | Prediction Market |
| Technique class | Frontend & Infrastructure |
| Technique | Supply Chain Attack |
| Bridge incident | No |
| Within 2026 | #73 by loss that year, 0.0% of all reported losses that year |
How this kind of attack works
The website, domain or hosting was hijacked, and users signed transactions that sent funds to the attacker from a page that looked normal.
Would a pre-payment check have helped
When a frontend or domain is hijacked the payee address is freshly generated and on no list, but the hijacked host is often already a known phishing domain, so endpoint screening catches part of this class.
Other incidents with the same technique
- Binance CEX2026-10-29 · $6.36B
- Mixin Network2023-09-23 · $200.0M
- Badger DAO2021-12-02 · $120.0M
- Atomic Wallet2023-06-03 · $100.0M
- Ledger (Supply Chain)2026-10-09 · $93.0M
- NiceHash2017-12-08 · $64.0M