5月22日、Polygonブロックチェーン上のPolymarket関連ウォレットにおいて、秘密鍵の流出により52万ドル以上が不正に引き出された。予測市場プラットフォームである同社は、ユーザーの資金およびコアコントラクトへの影響はないと明言した。
ブロックチェーン調査員のZachXBT氏が午前8時22分（協定世界時）にこの事案を最初に指摘し、管理者用アドレスが侵害され、攻撃者のアドレス「0x8F98075db5d6C620e8D420A8c516E2F2059d9B91」に資金が送金されたことを突き止めた。その後、Bubblemapsの報告によれば、POLトークンが30秒ごとに5,000単位で流出し、被害額は60万ドル近くまで増加した。オンチェーンデータでは、警告期間中にPolymarketのラベルが付いたアドレスから繰り返し送金が行われていたことが確認された。
X上での初期の反応は、Polygon上の秘密鍵侵害によりPolymarketの内部ウォレットから52万ドルから70万ドルが流出したことに集中している。ユーザーの資金とコアコントラクトは安全であるという見解で一致している。ユーザーは古い鍵の運用セキュリティに関する教訓を強調しており、今回の事案は非中核的なアダプターコントラクトに限定されていたと指摘している。
polymarket just got drained for ~$660k
— Rahul (@0xrahulweb3) 2026年5月22日
before you panic :
user funds are safe
markets still working
no exploit on core contracts
from what they said an old internal wallet/private key got compromised
crazy part is it wasn’t even the protocol itself
just shows how one… pic.twitter.com/vV3ACYhzwI
POLYMARKET HIT BY $520K POLYGON EXPLOIT
— SpendNode (@spendnode) 2026年5月22日
On-chain sleuth ZachXBT flagged the drain this morning. Polymarket confirms a compromised governance role was the entry point and says user funds are unaffected.
The compromised key has been revoked. Trading is still live and the team…
🚨 Polymarket Hit for $600K 🚨
— TangentCash ✨ (@tangentcash) 2026年5月22日
• The Bug: Attacker is exploiting the UMA CTF Adapter contract.
• The Theft: An automated script is draining 5,000 $POL every 30 seconds. Total losses topped $600k.
• The Flow: Bubblemaps tracked stolen funds being split into 15 fresh wallets.
Polymarket just got drained for $700K in a contract exploit, per Coindesk. But here's the quant angle most missed: this attack vector reveals why prediction markets are actually MORE robust than people think 🧵
— Psionic (@Psionic_Ai) 2026年5月22日
Polymarket got exploited for up to $658K. Attacker drained it via 5,000 automated POL withdrawals every 30 seconds. On Polygon. 🔴https://t.co/Wbh0SJJ5fr
— coinasity (@coinasity) 2026年5月23日
AIによるレポート AIによって生成された画像
Prediction market platform Polymarket has partnered with blockchain analytics firm Chainalysis to monitor trading activity and detect potential insider trading. The collaboration introduces onchain tools to flag suspicious patterns amid rising regulatory scrutiny. Polymarket announced the move on Thursday.
Hackers stole roughly $3.1 million in PUSD tokens from 11 user wallets on the prediction platform. The theft followed a phishing attack that exploited a compromised third-party vendor.
AIによるレポート
U.S.-linked wallets accounted for the largest share of political trading on Polymarket over the past year, reaching $571 million despite the platform's legal restrictions on American users.
Humanity Protocol said hackers stole more than $36 million in H tokens by compromising an employee's laptop that held multiple bridge admin keys. The decentralized identity project has halted bridge activity and is working with law enforcement.
AIによるレポート
TRM Labs recorded 207 crypto hacks during the first half of 2026, the highest six-month total the firm has tracked. Total losses reached $972 million, down sharply from $2.3 billion in the same period a year earlier.
Polymarket has settled its disputed prediction markets on Strategy's Bitcoin sale, ruling the May contract No and the June contract Yes. The decision followed a vote by UMA token holders.
AIによるレポート
Solana-based Drift Protocol has outlined a plan to repay users following a $295 million exploit linked to North Korean hackers. The lending platform proposes tokenized claims and a revenue-backed recovery pool to cover losses. Drift is working with law enforcement to trace and recover the stolen funds.