Prediction market platform Polymarket said hackers stole funds from an unspecified number of users after compromising a third-party vendor and injecting malicious code into the company’s website.

What Polymarket Says Happened

In a post on X on Thursday, Polymarket said the incident affected “some users” and that it has since contained the breach. The company added that it is contacting affected customers and will refund them in full.

Follow THE FUTURE on LinkedIn, Facebook, Instagram, X and Telegram

As of Thursday afternoon, however, the full scope of the incident remained unclear. A Polymarket spokesperson confirmed that the breach resulted in the theft of user funds but declined to provide additional details.

Reports Point To Phishing And Crypto Losses

Around the same time as Polymarket’s disclosure, blockchain monitoring firm PeckShield reported on X that a phishing campaign targeting Polymarket users was underway. According to the firm, approximately $3 million in cryptocurrency was stolen.

A blockchain analyst also reported similar losses, claiming the funds had been taken from more than 11 victims. Because Polymarket allows users to deposit cryptocurrency, account security remains a key consideration for its users.

Another Setback For A Company Under Pressure

The security incident comes during a difficult week for the company. On Sunday, an investigation revealed that Polymarket had paid online creators to publish deceptive videos portraying fake betting wins as genuine. In response, the company said it would audit its promotional content.

In recent days, two users also claimed on social media that funds had been stolen from their Polymarket accounts, adding to concerns over the platform’s security and user trust.