This is the second time Polymarket users have lost funds due to exploits Polymarket has blamed on third-party vendors. In June, customers lost almost $3 million after a malicious script was injected into the frontend. They reimbursed user losses then, and have said they will do the same in this incident as well.
Polymarket users' funds stolen, again
Polymarket users have lost a combined, estimated $2.65 million after a Polymarket exploit. The company acknowledged there had been "an incident" and put the site into "cancel-only" mode, meaning that all bets were disabled outside of cancelling them. They later, once again, claimed that the issue is due to the compromise of a "third-party provider", and re-enabled trading after about an hour.