Polymarket Pauses International Trading After Security Issue Involving Third-Party Provider

Polymarket, a prominent cryptocurrency-based platform, has paused international trading due to a security issue involving a third-party provider, reported to be DebugBear, a UK-based company. This development comes as a significant disruption to the platform's operations, impacting approximately 700 users and leading to a reported $2.7 million in stolen assets. The pause lasted roughly one hour before trading resumed later in the day.

The incident highlights the interconnected nature of digital platforms and the potential vulnerabilities that can arise from third-party services. DebugBear, known for its website performance monitoring, was at the center of the security breach, which reportedly originated from their platform. This underscores the importance of robust security measures even for seemingly unrelated services that may interact with larger financial ecosystems.

According to several outlets, the hack affected a third-party vendor rather than Polymarket’s website directly. This distinction is crucial as it indicates that the issue stemmed from an external service, rather than a direct compromise of Polymarket’s own systems. The discrepancy in reported figures—$2.5 million versus $2.7 million—highlights the ongoing efforts to pinpoint the exact amount lost during the incident.

Polymarket has taken swift action to address the situation, referring the matter to a law enforcement agency in the UK and committing to fully reimburse affected traders. This demonstrates the platform's commitment to maintaining trust among its user base and ensuring that any financial losses are mitigated for those impacted by the breach.

The international exchange operated by Polymarket runs on the Polygon blockchain and is not subject to U.S. regulation, distinguishing it from Polymarket US, which functions as a federally regulated financial exchange within the United States. This regulatory difference adds another layer of complexity to the incident, as it involves cross-border financial transactions and potentially different legal frameworks for handling such security breaches.

In addition to the immediate impact on users, the incident also brings attention to Polymarket's broader business landscape. The platform recently raised $1 billion in August 2026, valuing it at $21 billion, and processes about $200 million worth of trading activity daily. These impressive metrics highlight Polymarket's significance in the cryptocurrency market and the potential stakes involved in securing its operations.

Furthermore, Polymarket is currently engaged in a regulatory battle with U.S. states and the Trump administration over the rules governing prediction-market betting. This ongoing dispute adds another dimension to the platform's operational challenges, as it navigates both domestic and international regulatory landscapes while managing its core trading activities.

The incident also saw DebugBear experiencing its own website unavailability due to a security issue, leading the company to advise clients to remove embed code from their websites. This further illustrates the cascading effects of security breaches and the importance of quick response and mitigation strategies in digital services.

What We Know

• Polymarket paused international trading due to a security issue. ¹²³⁴⁵
• The security incident involved a third-party provider. ¹²³⁴⁵
• DebugBear, a UK-based company, is linked to the source of the incident. ¹²⁴⁵
• Around 700 users were affected by the hack, with approximately $2.7 million stolen. ³⁵
• The hack affected a third-party vendor based in the United Kingdom. ³
• The hack originated from DebugBear, a website performance monitoring platform. ⁵
• The pause lasted approximately one hour. ¹²⁴⁵
• Trading resumed on the same day in the afternoon. ¹²⁴⁵
• Polymarket will fully reimburse affected traders. ¹⁴⁵
• Polymarket referred the incident to a law enforcement agency in the UK. ¹⁴
• Polymarket's U.S.-based platform was unaffected by the breach. ⁴⁵
• DebugBear experienced its own website unavailability due to a security incident. ¹
• DebugBear advised clients to remove embed code from their websites. ¹
• The incident occurred on Thursday. ²
• The international exchange operates on the Polygon blockchain and is not regulated in the U.S. ⁵
• Polymarket US operates as a federally regulated financial exchange within the United States. ³
• Polymarket's flagship platform is a cryptocurrency-based platform banned in the U.S. and several other countries. ³
• Polymarket raised $1 billion in August 2026, leading to a valuation of $21 billion. ³
• Polymarket processes about $200 million worth of trading activity daily. ⁴
• Polymarket is involved in a regulatory battle with U.S. states and the Trump administration over prediction-market betting regulation. ⁴
• Polymarket is investigating suspicious bets related to Israel's elections and U.S. midterms. ⁴

What Remains Unclear

• The exact amount of assets traced to a suspected attacker wallet. ²
• The total amount withdrawn across 710 wallets. ⁵