Polymarket Confirms Recent User Account Breach Due to Third-Party Vulnerability

December 24 Decentralized prediction market platform Polymarket confirmed on Wednesday that a recent security vulnerability tied to a third-party identity verification provider has impacted multiple users. Earlier this week, reports of compromised Polymarket accounts began popping up on Twitter and Reddit, with affected users sharing details of their losses on social media. Per user accounts on those platforms, the issue appears to have hit users who registered for Polymarket via Magic Labs— a service that lets users log in with their email and create non-custodial Ethereum wallets. Magic Labs is popular among crypto newcomers who don’t yet have digital asset wallets. On Tuesday, Polymarket addressed the issue in an official Discord post, saying: “We recently identified and fixed a security issue impacting a small number of users. This issue stemmed from a vulnerability introduced by a third-party identity verification provider.” However, the platform did not disclose how many users were affected, the total amount stolen, or the name of the third-party service involved. Polymarket added that the issue has been resolved and there is no remaining risk. (Source: The Block)