预测市场平台Polymarket周四因其称第三方软件遭到入侵，被迫暂停其国际平台交易近一小时。Polymarket的Discord频道上也有未经证实的用户报告称，他们的钱包被掏空。Polymarket未确认用户有资金损失，但在X上发帖称“任何受影响的人都将得到全额补偿”。公司随后在X上另一篇帖子中表示：“我们会把这件事处理好，并将全额补偿所有受影响的交易者。”
Prediction markets platform Polymarket was forced to halt trading on its international platform Thursday for nearly an hour because of what it said was a compromise of third-party software. There were also unconfirmed reports from users on Polymarket’s Discord channel who said their wallets had been drained. While Polymarket did not confirm that users had lost money, it said on X post “anyone who has been impacted will be made whole.”“We’ll make this right and are fully reimbursing all affected traders,” the company said in a subsequent post on X. Polymarket said the attack appeared to emanate from the United Kingdom and that it had referred the matter to British law enforcement authorities.
Polymarket称，这次攻击似乎源自英国，并已将此事移交给英国执法机构。据一位了解详情的人士透露，黑客通过网络分析和网站性能工具DebugBear的软件获取了资金，该人士因被允许匿名处理不断发展的安全局势而未具名。DebugBear在X上表示，周四东部时间下午2时左右正经历一场“持续的安全事件”。加密货币新闻网站《The Block》援引区块链分析机构Arkham的数据报道称，约265万美元的加密货币已从Polymarket用户钱包中被转走。
The hackers gained access to the funds via software from DebugBear, a web analytics and website performance tool, according to a person familiar with the details who was granted anonymity to address an evolving security situation. DebugBear said on X that it was experiencing an “ongoing security incident” at around 2 p.m. ET Thursday. Crypto news website The Block reported that some $2.65 million in cryptocurrencies had been siphoned from Polymarket users’ wallets, citing data from blockchain analysis group Arkham.
Polymarket的一名代表拒绝就该数字或攻击的具体性质发表评论。Polymarket在其X帖子中表示，已发现并修复了影响其国际平台Polymarkem的问题。“我们的一家第三方供应商遭到了入侵，我们已将此事移交给相关执法机构，”Polymarket表示。“出于谨慎起见，我们已暂时暂停交易，并正努力让平台重新上线，”它补充道。
A Polymarket representative declined to comment on that figure or on the precise nature of the attack. Polymarket said in its X post that it had identified and fixed an issue affecting its international platform, Polymarkem. “One of our 3rd party providers was compromised, and we have referred this to relevant law enforcement,” Polymarket said. “Out of an abundance of caution, we have temporarily halted trading & are working to bring the platform back online,” it added.
交易在离线近一小时后，于东部时间下午3时恢复。Polymarket位于美国的平台似乎未受此次入侵影响。入侵第三方供应商已成为恶意行为者获取大型平台和网站访问权限的常见手段。
Trading began again at 3 p.m. ET after nearly an hour offline. Polymarket’s U.S.-based platform did not appear to be affected by the breach. Compromising third-party vendors has become a common way malicious actors gain access to large platforms and websites.
然而，这些黑客成功从Polymarket用户手中窃取资金，使这成为一起重大安全事件。今年9月，在小唐纳德·特朗普牵头的一个投资者团体向该平台投资10亿美元后，Polymarket的估值达到210亿美元。该公司每天处理的交易活动价值约2亿美元。Polymarket及其竞争对手Kalshi已成为美国各州与特朗普政府之间一场耗资数百万美元的激烈争夺战的对象，争夺的焦点是谁有权监管这些网站上的预测市场博彩活动。
These hackers’ success in stealing money from Polymarket users, however, makes this a significant breach. Polymarket was valued at $21 billion in September after a group of investors led by Donald Trump Jr. invested $1 billion in the platform. The company processes about $200 million worth of trading activity daily. Polymarket, along with rival Kalshi, has become the subject of an intense, multimillion-dollar battle between U.S. states and the Trump administration over who gets to regulate the prediction-market betting that occurs on the sites.
这些平台还在继续防范潜在的内幕交易活动。周四早些时候，彭博新闻社报道称，Polymarket正在调查有关在以色列备受关注的选举期间出现可疑投注的报告。据该公司全球情报与调查主管莎娜·包蒂斯塔称，公司还在调查与美国总统中期选举相关的“数十笔”投注。本月早些时候，Kalshi表示正在调查涉及特朗普新闻秘书人选的可疑投注。
The platforms also continue to fight off potential insider trading activity. Earlier Thursday, Bloomberg News reported Polymarket was investigating reports of suspicious bets made amid Israel’s closely watched elections. It is also investigating “dozens” of bets related to the U.S. midterms, according to the company’s head of global intelligence and investigations, Shana Bautista. Earlier this month, Kalshi said it was looking into suspicious bets involving Trump’s choice for press secretary.