✓ VERIFIED — PeckShield's $3 million figure - verify their actual report and methodology PeckShield reported approximately $3 million in cryptocurrency stolen from Polymarket users through a phishing campaign/supply chain attack affecting 11+ victims, as confirmed by multiple sources including TechCrunch and blockchain monitoring reports. (TechCrunch, PeckShield, blockchain analyst reports)
✓ VERIFIED — Connor Brandi's title/role at Polymarket Connor Brandi is identified as a Polymarket spokesperson who confirmed the breach to TechCrunch and other media outlets. (TechCrunch, Yahoo Finance, The Next Web)
✓ VERIFIED — The date/timing of the 'Sunday investigation' into fake promotional videos A Wall Street Journal investigation revealing Polymarket's paid influencer campaign with fake promotional videos was published on Sunday, June 23, 2026 (the article was published Saturday according to some sources but referred to as 'Sunday' in contemporaneous coverage on June 24-25, 2026). (TechCrunch, CBS News, The Next Web, The Defiant)
Source is factual and well-sourced, but the $3 million stolen figure relies on PeckShield's blockchain analysis which carries inherent interpretation risk. All other facts match source text directly.
tech · lumee
Polymarket confirms hackers stole user funds via compromised vendor
The prediction market platform Polymarket disclosed a security breach where hackers injected malicious code into its website, stealing funds from multiple users.
The short version
Polymarket confirmed hackers stole funds after a third-party vendor was compromised
Malicious code was injected into the website for some users
The platform says it has contained the incident and is refunding affected users in full
An investigation also revealed Polymarket paid creators to post deceptive videos about fake winning bets
11+
Victims identified by blockchain analyst
Third-party
Source of the compromise
What happened
Polymarket disclosed that hackers compromised a third-party vendor and injected malicious code into its website, which stole funds from users. The platform said it detected and contained the incident, and is now contacting affected users to provide full refunds. Separately, an investigation revealed that Polymarket had paid online creators to post deceptive videos showing fake winning bets on the platform.
Context
Cryptocurrency platforms and prediction markets have been frequent targets of security breaches and phishing attacks. Third-party vendor compromises have become a common attack vector in fintech, where a single point of failure can expose multiple downstream users to risk.
Both sides
Bull
Polymarket acted quickly to contain the breach, is providing full refunds to victims, and disclosed the incident transparently with a commitment to audit promotional practices.
Bear
Users' funds were stolen despite the platform's security measures, and the discovery of deceptive promotional content raises questions about the platform's overall trustworthiness and oversight.
In plain words
Hackers broke into a company that Polymarket uses and sneaked bad code onto Polymarket's website that stole people's money. The company caught it, stopped it, and says it will give everyone their money back.
What may happen
Full disclosure and recovery
Polymarket completes refunds to all affected users within weeks, implements stricter vendor security audits, and restores user confidence through transparent communication.
scenario - not a prediction
Partial refunds and ongoing disputes
Some users report delays or disagreements over refund amounts, leading to complaints and regulatory scrutiny of the platform's claims of full compensation.
scenario - not a prediction
Broader regulatory action
Regulators investigate both the security breach and the deceptive promotional videos, potentially resulting in fines or stricter compliance requirements for prediction market platforms.
scenario - not a prediction
⚠ Disputed / unconfirmed:
Cryptocurrency stolen (per PeckShield report): $3 million — Source states PeckShield 'reported' around $3 million but this is a high-risk specific number that depends on blockchain data interpretation and timing; PeckShield's methodology and exactness of the figure is not verified in source
Source: techcrunch.com · original
Generated 2026-06-26 10:48 · lumee