Polymarket said a compromised third-party monitoring script disrupted its international platform on October 29. The company said the script used some active sessions to sell positions and move funds. It removed the script, reset sessions and temporarily stopped trading and relayer activity.
In an October 30 update, Polymarket said it was returning $3.9 million: $2.7 million associated with the attack and $1.2 million for losses linked to the trading pause. It reported that 95% of affected wallets had been refunded in full as of that afternoon. That figure is not a current completion rate and does not establish that every disputed amount has been resolved.
