Samuel Adcock

Co-Founder at the Ortus Club ( run focused knowledge sharing events

[Samuel Adcock @SamuelAdcock]

@Polymarket @PolymarketHelp So the question I still can't get answered:

When did my private key leave their provider's custody, and to whom?

If it was never revealed, it wasn't phishing. Something else happened.

@Polymarket @PolymarketHelp

[Samuel Adcock @SamuelAdcock]

My Polymarket account was drained on 23 Aug.

$526,781 gone in 96 unauthorised transactions over 13 hours.

I've traced all of it on-chain. ~$295k is still sitting still and freezable right now.

Posting the full trace because I want help working out how the key got out.

[Samuel Adcock @SamuelAdcock]

@Polymarket @PolymarketHelp Meanwhile 223,596.97 PUSD has sat untouched for over 50 hours:

0x826712fe1bc7b2B90D797168D5B992d2b5B4803C

Polymarket hold the upgrade key on the PUSD contract and control the gate that lets it be redeemed. They can act.

I've asked them to. They haven't.

[Samuel Adcock @SamuelAdcock]

@Polymarket @PolymarketHelp I have never viewed or exported my private key.

I was targeted once before, and because of that I made a deliberate point of never revealing it — precisely so this couldn't happen.

It was custodied by their wallet provider. Never by me.

[Samuel Adcock @SamuelAdcock]

@NJr07N Bond buying

[Samuel Adcock @SamuelAdcock]

@CSP_Trading Different account, never touched anything with this account lime that

[Samuel Adcock @SamuelAdcock]

@GollumGekko1 @GenaTheCroco @zachxbt Yes please!

[Samuel Adcock @SamuelAdcock]

@GenaTheCroco I just posted on my profile what I know so far, @Polymarket being very slow to get back to me. Any advice help would be greatly appreciated.

[Samuel Adcock @SamuelAdcock]

@jmisarocket12 yes, trying, but very little back so far!

[Samuel Adcock @SamuelAdcock]

Laundering route:

Router 0xfb7C744DA69aef11DfB54F31D9dB12A3B086b025
(skims ~0.875% to 0xe3478b0BB1A5084567C319096437924948Be1964)

PUSD �� USDC.e → USDT, bridged to BSC via @MayanFinance and @lifiprotocol / @AcrossProtocol

[Samuel Adcock @SamuelAdcock]

And whoever it was, was fumbling:

02:49 gas bought from an exchange
02:51 11.3 POL sent to my key
02:55 attempt to spend — FAILED
02:59 attempt — FAILED
03:41 attempt — FAILED
03:51 works. Draining starts.

Nobody with app access needs an hour to work out a contract call.

[Samuel Adcock @SamuelAdcock]

The part I can't explain:

In 20 months that signing key had never sent a transaction of its own. Everything went through Polymarket's relayer, gas-sponsored.

On 23 Aug it started submitting raw, self-funded txs.

The key was being used outside the app.