Polymarket Phishing Loss Climbs to $3.1 Million After Full-Refund Pledge

By Isaac • June 28, 2026 9:07 am •

The Polymarket phishing attack is now pegged at roughly $3.1 million in stolen PUSD, an increase over earlier estimates.

Blockchain intelligence firm AMLBot updated the loss figure, and 11 user wallets were affected.

The stolen funds were taken from Polygon and then bridged to Ethereum. Polymarket has pledged to refund affected users in full.

The attack did not break the core prediction-market protocol, and it did not hit every Polymarket user. The vector was a third-party vendor that fed malicious code into the front end for some people.

Polymarket Traders described the vendor and front-end mechanics behind the incident response. Polymarket Traders said a third-party vendor had been compromised and had injected malicious code into the