Polymarket Hit by Third-Party Authentication Breach—User Funds Lost

Polymarket confirmed a security breach affecting users via a third-party authentication provider, mainly impacting those signed up through Magic Labs. The issue has been resolved, but the number of affected users and losses remain undisclosed.

Polymarket has confirmed that several user accounts were compromised due to a vulnerability in a third-party authentication provider, with many affected users having signed up through Magic Labs. Reports of unauthorized access and drained accounts surfaced on social media, with users noting suspicious login attempts even when two-factor authentication was enabled. Polymarket acknowledged the breach on its official Discord channel, attributing the incident to the third-party provider and assuring that the vulnerability has been resolved. The platform did not disclose the number of affected users or the total losses but stated that no ongoing risks remain and that impacted users will be contacted. The incident underscores the risks associated with third-party dependencies in the crypto ecosystem, as previous breaches involving other providers have also been reported.