Just updated our bug bounty to include some contracts we recently deployed. Dig in and submit if you come across any valid findings.
Up to $5,000,000 in rewards available for a valid finding.
Josh and the @Polymarket team are showing exactly how a strong reaction to a critical security event should look:
✅Clear understanding of the root cause
✅ Fast preliminary assessment of what’s happening - (frequently called Triage in Tech space)
✅Immediate containment (key rotation + revoking permissions)
✅ Quick coordination to freeze and recover assets where possible
They’re already outlining next steps too: implementing stronger security measures, auditing current structures/processes, and committing to do better going forward.
This is the gold standard for how projects should handle incidents.
Transparency + speed + accountability builds real trust.
Well done, team 👏
The sheer quantity of incorrect, half and fake news being published is insane. No polymarket or UMA contracts have been exploited. All user funds are safe, https://t.co/4miTNBBcKP is safe.
A 6 year old private key got compromised which had no admin rights.
https://t.co/55ltldQHB6
Something Huge Happened on Polygon...
In case you missed it, a major exploit hit @Polymarket on Polygon (@0xPolygon).
An attacker drained more than $660,000 from the smart contract. They made many small transfers of 5K MATIC each time.
On-chain investigator @ZachXBT first raised the alarm, with community reports confirming losses between $520K and $660K so far.
Polymarket is one of the biggest decentralized prediction markets.
We’re aware of the security reports linked to a compromised operation wallet.
User funds and market resolution are safe. Findings point to a private key compromise of a wallet used for internal operations. All our contracts and core infrastructure remains secure.
We’re aware of the security reports linked to rewards payout. User funds and market resolution are safe.
Findings point to a private key compromise of a wallet used for internal operations, not contracts or core infrastructure.
More updates to follow.
We’re aware of the security reports linked to a compromised operation wallet.
User funds and market resolution are safe. Findings point to a private key compromise of a wallet used for internal operations. All our contracts and core infrastructure remains secure.
We’re aware of the security reports linked to a compromised operation wallet.
User funds and market resolution are safe. Findings point to a private key compromise of a wallet used for internal operations. All our contracts and core infrastructure remains secure.
We’re aware of the security reports linked to a compromised operation wallet.
User funds and market resolution are safe. Findings point to a private key compromise of a wallet used for internal operations. All our contracts and core infrastructure remains secure.
Excited to announce that I’m now leading Protocol Engineering @Polymarket !
I’ve been here about 3 months now and the engineering talent we’ve acquired over the past couple of months is insane. We have elite talent from some of the top crypto protocols and companies with years of crypto infrastructure experience under their belt, and we’re all starting to get into the rhythm of working together. You can see the result of it over some of the releases we had over the past few weeks. And we’re only getting started!
Our mission is to will the promise of prediction markets into existence. And to achieve that we’ve oriented the Protocol team around the philosophy of ‘Product-led Protocol Engineering’. We do not build protocols because it’s intellectually stimulating, rather we build it because there’s a genuine problem to be solved. We ship with speed while being security conscious at the same time.
If this excites you and you want to be working with me, @devjoshstevens and @shayne_coplan on a regular basis. Then reach out! We’re opportunistically looking for 1-2 more protocol engineers to join the team. Great engineering and design is table stakes. We’re additionally looking for high agency, good communication, great taste and customer intuition. You can be a superstar, but you’re still part of the team.
We have an ambitious roadmap and aim to make Polymarket synonymous with Prediction Markets. We are the search engine for the future.