2026-10-31
Polymarket Trading Halted After a Third-Party Script Was Compromised: What Users and Site Operators Should Do
On October 29, 2026, Polymarket's status page reported that its international platform (Polymarket.com) went into cancel-only mode at 2:05 p.m. ET, that a third-party provider had been compromised, that the matter was referred to law enforcement and that anyone impacted will be made whole; trading was temporarily halted at 2:37 p.m. ET out of an abundance of caution and expected to resume around 3 p.m. ET. Press reports, citing a security research firm, say the provider was a website performance-monitoring service whose script ran on Polymarket's pages and was used to sell or move logged-in users' holdings, and put the amount traced at roughly $2.2 to $2.7 million depending on the outlet. Polymarket has not published a loss figure, the number of users affected, or how reimbursement will work. This site's take: users should treat any message about reimbursement as a possible scam and use only the official site, and site operators should inventory every third-party script on pages where users are logged in.