Polymarket will pay $3.9 million to users affected by a recent site compromise, according to a post-mortem the company published. The payout includes $2.7 million to cover initial losses and $1.2 million to cover losses tied to the platform's hours-long shutdown.
"No claims or tickets needed: we identified eligible wallets from on-chain and trading data," the company said.
Polymarket did not respond to requests for comment about how many people were affected. As of Saturday, the company said 95% of affected wallets had been refunded in full. Users who believe Polymarket's calculations are wrong were urged to contact the company.
The platform suffered outages on October 29. Polymarket later attributed them to a compromise involving DebugBear, a company that provides website performance services. Cybersecurity firm Hudson Rock previously said it found evidence of "wallet-draining code" designed to find accounts, select assets and transfer funds to a designated account.
In its post-mortem, Polymarket said an attacker replaced the performance-monitoring script loaded onto polymarket.com with one designed to steal from users. "For some people who had the site open during a small window … it used their active session to sell positions and move funds out of their wallet. The vendor has confirmed the comp