Coinpaper 2025-12-25 05:00:00

Polymarket Links User Account Breaches to Third-Party Login Flaw

The company said the issue affected a limited number of users, and has since been fully remediated. Polymarket stated it is contacting the impacted users directly and explained that the flaw did not originate from its core infrastructure. Polymarket Confirms Security Breach Polymarket confirmed that a recent wave of user account breaches was caused by a vulnerability linked to a third-party authentication provider, following multiple reports of suspicious activity and drained balances across different social media platforms. Polymarket statement on Discord In a statement that was shared on its Discord channel on Tuesday, Polymarket said it identified and resolved a security issue that affected a “small number of users.” According to the platform, the flaw originated from a third-party login tool rather than Polymarket’s core infrastructure. The company said the issue has been fully remediated, there is no ongoing risk, and impacted users will be contacted directly. The disclosure came after users on Reddit and X reported unauthorized access to their accounts, with some claiming their balances were completely drained. Several users described seeing multiple failed or suspicious login attempts before their positions were closed and funds removed. One Reddit user said they noticed three login attempts overnight, despite their device and Google account showing no signs of compromise, only to later discover their Polymarket balance dropped to just $0.01. (Source: Reddit ) Speculation around the source of the vulnerability quickly spread online, with some users suggesting it may have been tied to Magic Labs, a wallet and authentication service integrated with Polymarket. One X user claimed their Polymarket wallet, which was created through Magic Labs, was drained despite never signing up via email or receiving phishing links. Polymarket did not publicly confirm which authentication provider was responsible. This is not the first time Polymarket users faced account security concerns. In late 2024, some users reported losing funds after logging into the platform through Google account authentication, which raised earlier questions about the risks associated with third-party login integrations. While Polymarket explained that the vulnerability has been fixed and that user funds are now safe, the incident renewed scrutiny of authentication methods used by crypto and prediction market platforms.

Наиболее читаемые новости

Why The Current XRP Valuation Doesn’t Make Se...
2025-12-25
Crypto Coach Says 2026 Will Be Epic for XRP,...
2025-12-25
Corporate Crypto Treasuries: US Firms Dominat...
2025-12-25
Bitcoin at $25,000: Crazy Flash Crash No One...
2025-12-25
Staggering $143M Unrealized Loss: LD Capital...
2025-12-25
-118,611,500,000 SHIB in 24 Hours: Shiba Inu...
2025-12-25
Massive ZEC Accumulation: New Whale Withdraws...
2025-12-25
Discover How a Childhood Passion Sparked a Cr...
2025-12-25

Связанные новости

Прочтите Отказ от ответственности : Весь контент, представленный на нашем сайте, гиперссылки, связанные приложения, форумы, блоги, учетные записи социальных сетей и другие платформы («Сайт») предназначен только для вашей общей информации, приобретенной у сторонних источников. Мы не предоставляем никаких гарантий в отношении нашего контента, включая, но не ограничиваясь, точность и обновление. Никакая часть содержания, которое мы предоставляем, представляет собой финансовый совет, юридическую консультацию или любую другую форму совета, предназначенную для вашей конкретной опоры для любых целей. Любое использование или доверие к нашему контенту осуществляется исключительно на свой страх и риск. Вы должны провести собственное исследование, просмотреть, проанализировать и проверить наш контент, прежде чем полагаться на них. Торговля - очень рискованная деятельность, которая может привести к серьезным потерям, поэтому проконсультируйтесь с вашим финансовым консультантом, прежде чем принимать какие-либо решения. Никакое содержание на нашем Сайте не предназначено для запроса или предложения