Polymarket said on October 30 that it would refund $3.9 million following the October 29 incident, including $2.7 million related to the attack and $1.2 million in losses tied to the trading pause. The platform explained that a compromised third-party monitoring script had used active sessions to sell positions and move funds. According to the company, 95% of affected wallets had been fully refunded as of that afternoon, a figure that does not represent a live completion rate. Polymarket removed the script, cleared caches, reset sessions and temporarily halted trading and relayer activity. The company also identified stronger security controls and refund reconciliation as the main issues requiring further assessment.
Source: Read the original article
