Crypto Economy and Cryptopolitan agree on the Polymarket exploit's core details but disagree on whether refunds to affected users have actually been confirmed or issued.
What all sources agree on
- The breach was linked to a compromised third-party monitoring script from DebugBear.
- Polymarket placed trading into cancel-only mode on October 29, 2026.
- Approximately $2.65-2.7 million was drained across roughly 710 wallets.
- The matter was referred to UK law enforcement.
- Trading was restored the same day.
- Polymarket's US platform was not affected; only the international exchange was impacted.
Where the reports disagree
1Whether reimbursements have been confirmed or issued
confirmed full reimbursements for affected users
We’ll make this right and are fully reimbursing all affected traders.
Even though the company communicated its refund plans, it does not confirm that any refunds have been issued.
What would settle it: Polymarket's own public statement or on-chain transaction records confirming disbursement of reimbursement funds to affected wallets.
What to make of it
Treat the exploit's mechanics, scale, and law enforcement referral as established; do not assume reimbursements have actually reached affected users until Polymarket or on-chain data confirms disbursement.
Treat the exploit's mechanics, scale, and law enforcement referral as established; do not assume reimbursements have actually reached affected users until Polymarket or on-chain data confirms disbursement.