Polymarket hacked, with vulnerabilities in the off-chain and on-chain transaction result synchronization mechanism

ChainCatcher reports that, according to the GoPlus Chinese community, the prediction market platform Polymarket was hacked due to a design flaw in the synchronization mechanism between off-chain and on-chain transaction results in its order system.

The attacker manipulated nonces to cause on-chain matched transactions to be canceled or invalidated before settlement, while off-chain records remained valid, leading to API false positives, affecting trading bots like Negrisk and causing user losses. The attack process is as follows: 1. The attacker submits or matches large reverse trades with market-making bots on Polymarket’s off-chain order book. 2. The attacker constructs transactions with forged or duplicate nonces or exploits on-chain nonce competition, ensuring the on-chain transaction reverts. 3. Polymarket’s API returns “Trade Successful” to the bot before on-chain confirmation, causing the bot to believe the position has been hedged, while the on-chain state has not yet changed. 4. The attacker then exploits the exposed direction by executing a real on-chain transaction, achieving “risk-free” profit. 5. Since the revert occurs on the blockchain layer, Polymarket’s fees do not explode, making the attack cost manageable and sustainable. GoPlus recommends users pause automated trading tools, verify on-chain transaction statuses, strengthen wallet security, and closely monitor official Polymarket announcements.

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.

Related Articles

Former Obama campaign manager Stephanie Cutter has joined prediction market platform Kalshi as a policy adviser.

Gate News message: On April 4, former Obama presidential campaign manager Stephanie Cutter joined prediction market platform Kalshi as a policy advisor.

GateNews6h ago

NCAA "Final Four" tips off tomorrow morning; Polymarket data shows the University of Michigan has a 35% chance of winning, the highest.

On April 4, the NCAA “Final Four” is about to kick off. The University of Michigan has the highest chance to win the championship at 35%, while the University of Arizona is at 32%. The games will feature a matchup between the University of Connecticut and the University of Illinois, as well as a showdown between the University of Michigan and the University of Arizona.

GateNews8h ago

Prediction: the market platform will accelerate its expansion in Asia; regulatory gray areas are the biggest challenge for further growth

Polymarket and PredicXion are expanding into Asian markets and launching Chinese-language support to drive localization. However, countries such as China and India lack clear regulation for blockchain prediction markets, and there are strict restrictions on gambling activities, which affects market expansion. The difference between prediction markets and gambling is their ability to aggregate information.

GateNews9h ago

Polymarket takes down market on missing US pilot after backlash

Polymarket removed a market tied to the fate of a missing US service member after mounting backlash, saying the listing violated its “integrity standards.” The controversy erupted after a prediction market appeared asking whether US authorities would confirm the rescue of a pilot reportedly shot

Cointelegraph11h ago

A prediction market platform delisted a “Missing U.S. military aviator” prediction market, saying it violated integrity standards.

A prediction market platform removed markets about the fate of a missing American pilot for violating the “integrity standards,” triggering controversy. U.S. House lawmakers criticized such betting as “disgusting” and questioned rule transparency. Meanwhile, concerns about insider trading have intensified, and regulators are calling for stronger restriction measures.

GateNews11h ago

Nevada court extends ban on Kalshi sports prediction market, ruling it has no substantive difference from gambling

A Nevada judge ruled that Kalshi’s sports prediction market products have no substantive difference from gambling, extended the injunction prohibiting it from offering related services locally until the case is further considered. Regulators believe it should be subject to the state’s gambling regulations.

GateNews13h ago
Comment
0/400
No comments