Polygon community proposes hard fork to recover around 70.49 million stolen POL tokens

According to the Polygon community forum, the community has submitted a PIP proposal, which plans to conduct a coordinated hard fork to wipe out approximately 70.49 million native POL tokens from compromised attack addresses and transfer them to designated victim recovery addresses, covering stolen funds from two security incidents involving Polymarket and Binance. The proposal notes that between October 29 and 30, Polymarket and Binance successively suffered security breaches, with stolen native POL flowing into Polygon PoS attack addresses. At the request of relevant parties, block validators have added these addresses to the Bor transaction blacklist. Currently, five attacker-controlled addresses hold a total of ~70.49 million POL: ~23.86 million (across 4 addresses) related to Polymarket, and ~46.63 million (1 address) related to Binance. The blacklist only prevents outbound fund transfers, not asset recovery, and attackers are still attempting to bypass it. The proposal requires zeroing the native POL balances of the listed addresses at a fixed block, while crediting verified recovery addresses with an equal amount: Polymarket’s address is 0x3dcE0a2....a6440b4D952, Binance’s is 0xd9fd391....610b80. Total supply remains unchanged, limited only to the native POL in question. Proposed by Polymarket and Binance, the proposal will be presented at the Polygon protocol governance meeting at 14:30 UTC on November 5. If approved, client development and Amoy testing are expected to wrap up in about two weeks. The proposal emphasizes this is an extreme measure and should not serve as a precedent for normal operations.