Polymarket Was Exploited But User Funds Remained Safe
-

Polymarket confirmed that part of its infrastructure was affected by a security exploit linked to a compromised private key used for internal top up operations. Blockchain investigators estimate that attackers drained more than $600,000 from a wallet connected to the UMA Conditional Tokens Framework adapter on Polygon, although the platform says its core contracts and user funds were not impacted.The incident highlights one of the biggest realities in crypto security: even when smart contracts themselves remain secure, operational infrastructure and private key management can still create major vulnerabilities. Polymarket has already revoked permissions connected to the compromised key, but the exploit serves as another reminder that security risks in decentralized finance often extend beyond the blockchain code itself.
-
this trend means crypto companies increasingly need enterprise level cybersecurity practices rather than relying mainly on smart contract audits alone