We've expanded our bug bounty. 7 newly deployed contracts are now in scope on @cantinasecurity, with up to $5,000,000 in rewards for a valid finding:
- PositionManager
- Exchange
- BinaryModule
- NegRiskModule
- CombinatorialModule
- Router
- AutoRedeemer
Whitehats, dig in: https://t.co/dUTMlWJKsi
No polymarket or UMA contracts have been exploited. All user funds are safe, and using https://t.co/3FEzuqLolJ is safe, so business as usual.
We had a 6-year-old private key that was compromised. This was in the internal top-up config, which is why funds were being sent to it. We have rotated this key, revoked all prod permissions and are moving all PKs to KMS keys from now on.
@TheNotoriousSKi I intentionally mentioned the upper limit of the timeframe, but in practice they're processed much faster. For instance, you can see here that one of the recent refunds took less than 24 hours and was processed the same day
Polymarket has built the most comprehensive market integrity infrastructure in the prediction market industry, combining strict insider trading rules, AI-powered surveillance, and blockchain forensics into a unified system. �Polymarket has built the most comprehensive market integrity infrastructure in the prediction market industry, combining strict insider trading rules, AI-powered surveillance, and blockchain forensics into a unified system. �Polymarket has built the most comprehensive market integrity infrastructure in the prediction market industry, combining strict insider trading rules, AI-powered surveillance, and blockchain forensics into a unified system. �Polymarket has built the most comprehensive market integrity infrastructure in the prediction market industry, combining strict insider trading rules, AI-powered surveillance, and blockchain forensics into a unified system. 🧵
Exchange upgrades go live on April 28 at 11am UTC. ~1 hour of downtime. The v1 orderbook gets cleared and all open limit orders are cancelled. Funds and positions are safe.
Trading via API? Update to the latest SDK before then. V1 clients stop working after cutover.
Dev migration guide: https://t.co/wcqTIG4jzx
Users guide: https://t.co/JNTQ2lrJcP
We want to kill as many bugs on the @Polymarket UI as possible next week.. below report your issue with as much detail as possible and we will get it properly in the backlog and @louispolymarket and web team will get them fixed for you. Thanks in advance 💪