Polymarket Halts Trading After Vendor Breach Drains Funds

Polymarket switched off trading on 29 October 2026 after hackers hit a third-party vendor and emptied user accounts. If one outside partner can freeze a major prediction market, everyday wallet holders deserve to know how their funds are actually protected.

What actually happened

According to CoinDesk, Polymarket confirmed a breach at one of its third-party providers caused the losses. Users reported their balances emptied without permission before the platform paused all trading. Polymarket has not named the compromised vendor. The company has not disclosed how many wallets were hit or the total amount lost. CoinDesk's report is dated 29 October 2026. No timeline exists yet for restoring trading. CoinDesk also noted no public word on whether police were involved or whether Polymarket plans to reimburse affected users. Polymarket runs as a platform where people trade on real-world event outcomes, so any outage stops all open positions from settling.

How we got here

Prediction markets and other crypto apps often lean on outside companies for wallet tools, custody, or identity checks. A weak link in any of those vendors can expose users even when the main platform's own code stays secure. Pausing trading is the standard first move, it limits further damage while teams figure out what broke. Polymarket has not yet said which vendor failed, how attackers got in, or how far the breach spread past the accounts already flagged as drained. That gap leaves the real scale of this incident unknown for now.

Why this matters for you

For Polymarket traders, open positions sit frozen until the company explains what happened and whether refunds are coming. Anyone holding funds on a platform that outsources parts of its stack should ask which vendors touch their money and what happens if one fails. For everyday wallet users across bonuz and similar apps, the lesson is simple: a platform's own security is only as strong as its weakest partner. Builders connecting wallets to outside custody or verification services may now face more pressure to disclose those partnerships and prove they are audited.

The bigger question

If an outside vendor's failure can drain user funds, who should answer for it, the platform or the vendor? This breach raises a wider question for every wallet app that depends on third-party infrastructure: how can users know which partners hold access to their funds before something goes wrong? Prediction markets will not be the last crypto service to face that question.

What to watch

Watch for Polymarket to name the breached vendor and detail how many accounts and how much money were affected. No date has been set for resuming trading. Watch also for word on refunds to affected users. Bonuz will keep tracking how prediction markets and wallet platforms handle third-party security as these incidents repeat.