Polymarket reports refunds after a vendor compromise.

What happened

Polymarket reported on October 30, 2026, that an attacker replaced a vendor’s script and used active sessions to sell positions and withdraw funds.

What changed

Polymarket removed the script, paused trading and the relayer, reset sessions, and reopened trading.

What did not change

Polymarket’s reimbursement announcement establishes no change to settlement or redemption terms.

Confirmed

• Polymarket reported full refunds for 95% of affected wallets.
• Polymarket announced $3.9M in refunds, including $1.2M for losses related to the pause.

Still open

• Completion of all refunds remains unconfirmed.

What it means for an advisor

• Ketju should review the Polymarket memo’s account-security findings and confirm reimbursement for any affected holding.