Polymarket, the $21 billion prediction market backed by Donald Trump Jr.'s venture firm, just got hacked again. Around 700 traders appear to have lost roughly $2.7 million, and this comes months after a separate breach that cost users more than $2 million.
The company has promised refunds. It has not promised to tell anyone how much, or how many, or how this keeps happening.
Trading Halted, Wallets Drained
According to WIRED, trading on Polymarket's flagship international platform has resumed after a hack that drained money straight out of some traders' wallets. The company paused trading for several hours while it investigated, which is the financial-services equivalent of locking the front door after you've already watched the TV walk out of it.
Prominent traders took to X to complain about the missing money. Blockchain analytics firm Bubblemaps pegged the damage at around 700 affected users and roughly $2.7 million stolen. That is not a rounding error if you are one of the 700.
Polymarket says it will refund the impacted traders. Good. That is the bare minimum, and it is also the only part of this story that qualifies as good news.
Blame the Vendor, Not the Website
Here's the company's framing: a third-party vendor based in the United Kingdom was breached, not the prediction market's website itself. UK law enforcement has been notified.
Sure. Technically that distinction exists. But if you are a trader staring at an empty wallet, the org chart of who got hacked is not your first concern. Your money was on the platform. Now it isn't. Whether the hole was in the house or the shed out back, the burglar still left with the cash.
When asked how many traders were hit and how much money vanished, Polymarket declined to comment. So the only numbers we have come from an outside analytics firm. The company that holds your money would prefer you not ask how much of it just disappeared.
Two Platforms, One Very Convenient Firewall
Polymarket actually runs two separate prediction markets. Polymarket US is a federally regulated financial exchange operating inside the country. The flagship Polymarket is a cryptocurrency-based platform that is banned in the United States and a number of other countries.
The hack did not touch the US platform. So the regulated, supervised, legally permitted version came through clean, and the offshore crypto version is where the money got lifted. Draw your own conclusions about what that says about the difference between operating under rules and operating without them.
To be fair, a vendor breach could happen to anyone. But anyone doesn't have a track record, and Polymarket does.
This Is the Second Time in Five Months
In June 2026, Polymarket suffered another breach that cost impacted traders more than $2 million. Now it is October, and it is $2.7 million. Add them up and the platform has lost its users upward of $4.7 million to hackers in under half a year.
Once is an incident. Twice is a pattern. At some point "third-party vendor" stops being an explanation and starts being a confession that nobody is checking the vendors.
And the security woes are just one chapter in a long book of controversy. Polymarket has been a lightning rod since its 2020 launch, and the recent years have been especially colorful.
Insider Trading, Arrests, and Pleading Not Guilty
The platform has been at the center of several high-profile alleged insider trading incidents that ended in arrests. One case involved a Special Forces soldier accused of wagering on the capture of Venezuela's former leader. Another involved a Google employee who allegedly used confidential information to make millions. Both suspects have pleaded not guilty, and they are entitled to that presumption.
But think about what that means as a business model. A market where the people who know how things turn out can bet on how things turn out is not a crystal ball. It is a leak with a payout schedule.
The prediction market pitch is that crowds are wise and money sharpens the truth. The reality, at least in these allegations, is that someone with classified military knowledge or confidential corporate data figured out they could cash in. That is not the wisdom of crowds. That is a guy at the poker table who can see everyone's cards.
Trump Jr. Wrote the Check
And then there is the money. In August 2026, Polymarket raised $1 billion in a round led by 1789 Capital, the venture capital firm where Donald Trump Jr. is a partner. The company is now valued at $21 billion.
So to recap the timeline. A billion dollars comes in from the President's son's firm in August. A hack drains traders in June, and another one drains them in October. The valuation stays at $21 billion regardless.
Nobody is alleging the investment and the breaches are connected. The point is simpler. The market for protecting your customers' wallets and the market for raising a mountain of cash from politically connected investors appear to be two entirely different markets, and only one of them is working.
The Dingo Take
In August, Polymarket was a company that had just banked $1 billion from a firm with a Trump son's name on the letterhead. By October, it was a company explaining to 700 customers why their wallets were empty, again. Two months. That is how long it took to go from victory lap to apology tour.
Here's what should bother you. The money is not the story. A company worth $21 billion can write a $2.7 million refund check from the couch cushions. The story is that this is the second breach in five months, the company won't tell us how bad it was, and the platform's other claim to fame is a string of alleged insider trading arrests. Security is the product when you hold people's money. Polymarket keeps shipping the product with the box open.
And yes, the political plumbing matters. When a prediction market gets bankrolled by the family of a sitting president, in an era when that president's administration decides which markets get regulatory blessing, nobody gets to shrug and say it's just business. Refunds are nice. Answers would be better. How many traders, how much money, and who exactly is auditing the vendors? Until Polymarket says, the only thing the market is predicting is the next hack.
Comments