MediumMonitoringNo recent activityExploitINC-D29FBA

Polymarket $520K Exploit

Confidence87% · High
TypeExploit
Est. Loss$700.0K
Signals3
First DetectedMay 22, 2026, 9:58 AM
Last SignalMay 22, 2026, 12:23 PM

Overview

On-chain investigator ZachXBT identified suspicious transactions draining $520K from Polymarket's rewards payout system.

Over $520,000 drained from two Polymarket smart contracts on Polygon due to private key compromise; user funds safe.

Protocols
PolymarketUMA
Chains
Polygon
Assets
POL

Sources & Timeline

  1. NewCoinDesk90%

    On-chain investigator ZachXBT identified suspicious transactions draining $520K from Polymarket's rewards payout system.

    May 22, 2026, 9:39 AMRead on Bytewit →
  2. NewCointelegraph90%

    Compromised private key from a six-year-old internal top-up wallet allowed attacker to drain funds repeatedly.

    May 22, 2026, 10:19 AMRead on Bytewit →
  3. NewDecrypt80%

    On-chain investigator ZachXBT flagged suspicious drain from Polymarket-linked wallet.

    May 22, 2026, 12:23 PMRead on Bytewit →
Polymarket $520K Exploit | Bytewit Incidents