“This morning we learned that a third-party vendor was compromised, which inserted a malicious script into our frontend for some users. We have contained it and removed the affected dependencies,” Polymarket wrote on X. “We are contacting affected users and refunding them in full.”
An$3 million loss” A response was seen from Polymarket’s head of experience, William Leggett, who tweeted: “We are refunding the full amount to affected users, there are no user ‘losses’. And although it is not exactly confirmed that it is $3 million, it is difficult to conclude that the amount lost by the hackers was in the millions.
Leggett responded to another X account tweeting about the hackers, saying,Estimated loss of $2.94M so far.” The account, which tracks blockchain transactions, claims to have at least 11 victims who had PUSD, Polymarket’s stablecoin, drained from their wallets. It was swapped for Ethereum to launder the crypto, according to the account, which allegedly provided wallet addresses for the stolen funds.
It appears there may have been a phishing attack targeting Polymarket users, with an estimated loss of $2.94M so far.
The attacker withdrew funds from 11+ victim wallets holding PUSD, exchanged the stolen assets for ETH, and consolidated the proceeds to the following address:… pic.twitter.com/6WfS0JhdDG
— Specter (@SpectreAnalyst) June 25, 2026
Addressing that account, Leggett insisted, “We have resolved the issue and are refunding affected users in full.”
Polymarket has been in the news this week on social media after an ad from music producer Rick Rubin received praise from names like CNBC’s Andrew Ross Sorkin.
It’s rare for an ad to stop me these days. It kept me from getting cold. Whatever your view of prediction markets – and this is not an endorsement – the team behind this ad has created something truly remarkable. 👏👏👏 https://t.co/4EdgTfubEh
— Andrew Ross Sorkin (@andrewrsorkin) June 24, 2026
The company desperately needs this praise after a recent investigation by The Wall Street Journal found that social media was flooded with misleading videos showing people winning large sums of money on Polymarket. Creators were paid to make it appear that they had won hundreds of thousands of dollars, but it was not real. Polymarket reportedly created “almost perfect copies of its website” where makers could place fake trades and appear to be winning. But none of it was real.
Polymarket did not immediately respond to emailed questions Thursday about the hackers who may have taken the $3 million. Gizmodo will update this article when we hear back.
<a href