A private key compromise led to a drain of more than $520,000 from a Polymarket-linked wallet on the Polygon blockchain on May 22. The prediction market platform confirmed that user funds and core contracts remained unaffected.
Blockchain investigator ZachXBT first flagged the incident at 08:22 UTC, identifying a compromised admin address that sent funds to attacker address 0x8F98075db5d6C620e8D420A8c516E2F2059d9B91. Bubblemaps later reported losses climbing toward $600,000 as POL tokens were removed at a rate of 5,000 every 30 seconds. On-chain data showed repeated transfers from labeled Polymarket addresses during the alert window.
