Polymarket users claim that assets were transferred out without authorization, suspected to be due to a front-end attack

Polymarket trader Car posted on platform X that approximately $800,000 in assets from his Polymarket account were stolen, all positions were sold, and his friend's account was hacked for about $600,000. He reminded users to lock their accounts and refrain from interacting with the website for the time being.

Additionally, several users reported on platform X and the Polymarket Discord community that the website's front end appeared to be under attack, with assets being transferred out without authorization. Some users claimed to have lost around $200,000, while others reported receiving unauthorized withdrawal signature requests on the official website. As of the time of publication, Polymarket officials have not yet responded. In June of this year, Polymarket was previously targeted by a phishing attack on the front end due to a third-party vendor being compromised, resulting in the theft of approximately $2.94 million in user assets.