Polymarket adds $1.2m goodwill on top of $2.7m refunds

The extra payouts cover traders hit by Thursday’s halt after a compromised third-party script targeted user sessions.

The hit

Polymarket is handing out an extra $1.2m in goodwill payouts to roughly 5,500 wallets. The company says the goodwill money covers positions taken during the incident & losses associated with the trading pause. Its wider $3.9m programme also covers positions taken or force-sold, including slippage, markets that ended during the pause, & traders who sold shortly after trading resumed, according to Polymarket.

Why it matters

IBTimes UK says the incident illustrates the risks of letting external scripts run on pages where users are signed in & can move funds. A compromised script can exploit an active session’s privileges even without a breach of the platform’s core systems. Reuters identified the compromised third-party provider as DebugBear, citing a source familiar with the matter.

The record

Total reimbursement programme	$3.9m / £2.91m (Polymarket)
Refunded to drained wallets	$2.7m / £2.02m to 726 wallets (Polymarket)
Wallets refunded in full as of 30 October	689 of 726, rest processing (Polymarket)
Tokens traced to suspected attacker wallet	28.6m POL, ~$2.64m / £1.97m (The Hacker News)
Trading halt duration	about 1 hour, resumed ~3pm ET, Thursday 29 October (Polymarket)

What happens next

Watch for updates from Polymarket’s ongoing investigation & law enforcement referral, plus DebugBear’s fuller findings on whether other customers were hit by the DNS compromise.

Sources: Polymarket Reveals $1.2M in Extra Payouts for Traders Hurt by the Hour-Long Trading Halt

18+. Betting involves risk. If gambling is a problem for you or someone close to you, help is available.