Polymarket frontend reportedly compromised amid wallet drain reports
Security & Exploits ·
Users are being warned to avoid Polymarket's website entirely after reports of an active drain tied to the platform's frontend.
A post from TheGreekTrader on X stated that an active drain is underway and that the problem appears to originate from Polymarket's frontend rather than user error. The post urged people not to connect a wallet or sign any transaction on the site, specifically warning that attempting to withdraw funds is itself the action that leads to drainage. A follow-up post from the same account repeated the instruction not to open the site at all.
Some users reportedly believe the issue stems from a script embedded in the website's homepage, though this detail has not been independently confirmed. The original post also tagged a Polymarket-affiliated account along with the platform itself, apparently seeking acknowledgment or a response.
The warning is corroborated by multiple separate reports describing unauthorized asset withdrawals and a possible frontend compromise at Polymarket, with four distinct sources covering the cluster. None of the corroborating reports include an official confirmation from Polymarket, and the mechanism behind the alleged compromise — whether a malicious script, a compromised deployment, or another vector — remains unverified.
What remains unresolved is the scope of affected users, the total value of any drained assets, and whether Polymarket or any security partner has issued an official statement. Until an official confirmation or fix is announced, the practical guidance circulating is to avoid connecting wallets or signing transactions on the site, including withdrawal attempts, since that action has been specifically flagged as the point of compromise.