Polymarket Enters Cancel-Only Mode Amid Wallet Drain Concerns
Polymarket has temporarily locked its trading floor, implementing a cancel-only mode on October 29, 2026, amid unconfirmed reports of wallet drains and a possible frontend compromise. In this mode, users can withdraw existing orders but cannot place new ones. The platform has cautioned users against connecting wallets or signing transactions while the situation unfolds.
Reports of unauthorized withdrawals and suspicious signature prompts have emerged on social media, with estimated losses reaching hundreds of thousands of dollars. However, these figures remain unverified. Notably, Polymarket has not yet issued an official statement regarding the incident.
The distinction between a frontend compromise and a smart contract hack is critical. A frontend compromise involves tampering with the website interface, potentially tricking users into approving malicious transactions, while smart contracts are the underlying code that manages funds. As of now, there is no evidence indicating a flaw in Polymarket's smart contracts.
Polymarket operates on the Polygon network, utilizing non-custodial proxy wallets, meaning it does not hold user funds directly. Transactions are conducted using pUSD, a token pegged 1:1 to USDC. Market participants are closely monitoring on-chain activity on Polygon to trace any fund movements linked to the reported wallet drains.
This incident marks at least the third security scare for Polymarket in 2026, following a breach of an internal POL wallet in May and a supply-chain attack in June that drained approximately $3 million in pUSD from user wallets. These recurring issues raise concerns about the effectiveness of the platform's operational safeguards.
For users holding positions on Polymarket, the immediate advice is to avoid connecting wallets and to wait for an official update from the platform. The lack of communication from Polymarket has led users to rely on social media for information, highlighting the need for clearer guidance during such incidents.
Moving forward, stakeholders will be watching for an official statement from Polymarket, confirmation of the actual losses, and any traced fund flows on the Polygon network.
Updated 19:34 UTC
Latest Developments on Polymarket Incident
- Polymarket has entered cancel-only mode following reports of $1.4 million drained from user accounts.
- A trader reported losing $800,000, while a friend claimed an additional loss of $600,000.
- The platform has not confirmed whether a hack occurred, nor provided details on the cause or total number of affected users.
- Polymarket's status page indicated a major outage at 18:05 UTC on the same day.
- The exchange previously experienced a $3 million attack in June, where they pledged to refund affected users, but no such commitment has been made for the current incident.
- This incident follows a recent security breach at rival platform Predict.fun, which lost $400,000.
Updated 19:34 UTC
Latest Developments on Polymarket
- Polymarket's market share has dropped from 96% to 27% over the past two years.
- Kalshi now trades nearly three times the volume of Polymarket, logging approximately $65 billion in trading volume for October 2026.
- Polymarket US recorded $10 billion in trading volume for October 2026, a 15% increase month over month.
- Kalshi held around 83% of the market share among US-regulated platforms in October 2026, while Polymarket US sat at roughly 12% to 15%.
- Kalshi's open interest reached about $2.05 billion in October, compared to Polymarket US's $384 million.
- Polymarket's international volumes are shrinking, with its global product down to single digits in market share.
- Kalshi has expanded into sports and parlay-style bets, enhancing its product breadth.
- Polymarket's US arm is experiencing faster growth, but the absolute volume gap between it and Kalshi continues to widen.
- October 2026 saw record-high open interest in prediction markets due to the upcoming US midterm elections.
FAQ
What is the current status of Polymarket's trading platform?
Polymarket has entered a cancel-only mode, meaning users can withdraw existing orders but cannot place new ones. This decision was made amid concerns of wallet drains and potential frontend compromise.
What should users do during this incident?
Users are advised to avoid connecting their wallets or signing any transactions until further notice from Polymarket. It is recommended to wait for an official update from the platform.
What is the difference between a frontend compromise and a smart contract hack?
A frontend compromise involves tampering with the website interface, which can trick users into approving malicious transactions. In contrast, a smart contract hack refers to vulnerabilities in the underlying code that manages funds. Currently, there is no evidence of a flaw in Polymarket's smart contracts.
What has been the impact of the reported wallet drains?
Reports of unauthorized withdrawals have surfaced, with estimated losses reaching hundreds of thousands of dollars, although these figures remain unverified. The situation is still being monitored closely.
How does Polymarket ensure user fund security?
Polymarket operates on the Polygon network using non-custodial proxy wallets, meaning it does not hold user funds directly. Transactions are conducted using pUSD, a token pegged 1:1 to USDC, which adds a layer of security.
Comments
Comments are moderated before publish.
No comments yet — be the first.