Polymarket Halts International Trading After Vendor Breach

Prediction market Polymarket temporarily suspended trading on its international platform for about an hour on Thursday, October 29, 2026, following a security incident affecting a third-party software vendor. The company has committed to reimbursing any users who experienced financial impact.

What Happened

Polymarket, a prediction market platform, enacted a trading halt on its international operations for approximately one hour on Thursday, October 29, 2026, after a security compromise of a third-party software vendor. Reports surfaced around 1:30 p.m. ET within the platform’s official Discord chat forum, indicating that some user wallets had been drained of funds, as reported by The Washington Post. In response, Polymarket issued a statement affirming that all users impacted by the incident “will be made whole.”

At approximately 2 p.m. ET, Polymarket announced it had transitioned its international exchange into a “cancel-only mode.” This mode allowed users to cancel existing transactions but prevented them from initiating new trade orders (Polymarket Status, The Washington Post). The security issue specifically involved DebugBear, a third-party performance and debugging platform, according to an individual familiar with the matter who spoke anonymously to The Washington Post. Polymarket has reportedly notified authorities in the United Kingdom, where DebugBear is based, regarding the incident.

DebugBear acknowledged on social media that it was experiencing an ongoing security incident and advised users of its embedded web-monitoring tools to remove them from their sites. DebugBear did not immediately respond to The Washington Post’s request for comment.

Key Details

• Polymarket paused trading on its international platform for roughly one hour on October 29, 2026, due to a third-party software vendor compromise (The Washington Post).
• Users reported drained wallets around 1:30 p.m. ET, prompting Polymarket to commit to compensating all affected users (The Washington Post, The Verge).
• The incident involved DebugBear, a UK-based third-party performance and debugging platform, and Polymarket has reported it to UK authorities (The Washington Post).
• Polymarket implemented a “cancel-only” mode, allowing transaction cancellations but prohibiting new trades, while DebugBear advised users to remove its embedded web-monitoring tools (Polymarket Status, The Washington Post).

Why It Matters

The temporary halt of Polymarket’s international trading operations due to a third-party vendor security compromise underscores the inherent risks associated with integrating external services within digital trading platforms. Such incidents can erode user trust and highlight vulnerabilities in the broader ecosystem of online financial and prediction markets. Polymarket’s commitment to making affected users whole is a critical step in managing the fallout from such security breaches, which can have significant financial and reputational implications for operators in regulated and semi-regulated markets.

What’s Next

This is a developing story, and further updates are anticipated as Polymarket continues its investigation into the incident (The Washington Post). No specific timeline for the full resumption of international trading or the conclusion of the investigation was provided in the immediate aftermath of the halt.