Polymarket Sets New Refund Rules After Breach
The platform requires settlement agreements for users seeking reimbursements exceeding $10,000.
Updated on Oct. 30, 2026 in Cybersecurity
Live Poll
Should users be required to sign legal waivers to get refunds after an online platform breach?
Polymarket is enforcing a settlement agreement requirement for international users seeking refunds over $10,000 following a third-party security breach. Traders with losses below this threshold received automatic fund restoration by October 30.
Why it matters
The incident highlights the platform-level liability risks associated with third-party service providers in decentralized finance. This policy shift demonstrates how the platform manages legal risk while attempting to maintain user trust after a confirmed security compromise.
The firm established a $10,000 refund threshold as the trigger for mandatory legal release agreements. While the international Polymarket.com platform sustained the breach, the U.S. platform remains unaffected by the incident.
The players
Polymarket
A prediction market platform allowing users to trade on outcomes of real-world events.
The details
Polymarket experienced a security breach originating from a third-party provider, a service or software component supplied by an external partner that integrates into a larger platform. The company identified and remediated the vulnerability on October 29. Trading has since resumed on the platform, and the company has referred the incident to law enforcement for investigation.
Timeline
October 29, 2026: Polymarket identifies and patches the third-party security breach.
October 30, 2026: Deadline for automatic fund restoration for losses under $10,000.
The Tech Race
This incident follows the industry pattern set by the 2022 Ronin Network bridge exploit, where platforms must reconcile public reimbursement protocols with complex legal liability waivers. It underscores the ongoing struggle to secure perimeter integrations against third-party supply chain risks.
International users who suffered losses exceeding $10,000 must now navigate a formal settlement process to reclaim their assets. Smaller accounts, conversely, saw their funds restored to their accounts as of October 30.
The takeaway
The firm has resumed normal trading operations while the investigation remains with law enforcement. Traders should monitor the platform for future official disclosures regarding the final resolution of the third-party vulnerability.
Further reading
For broader analysis on protecting digital platforms, visit the Cybersecurity section.
Live Poll
Should users be required to sign legal waivers to get refunds after an online platform breach?
