exploit
Polymarket placed its exchange in cancel-only mode on Oct 29 after an unnamed third-party provider was compromised and ~$2.65M in USDC.e was swapped to POL via Relay to a single attacker address.
regulation
Polymarket's head of global intelligence Shana Bautista says a 16-person team is probing dozens of US midterm-election bets, with at least two referrals to the CFTC.
protocol
Polymarket's V2 replaces Gnosis Conditional Tokens with a single ERC-1155 contract, pUSD-only collateral, and a pluggable oracle layer (UMA plus Chainlink).
exploit
A poisoned JS dependency on Polymarket's frontend drained ~$3.1M in PUSD from 11+ wallets on June 25, swapped into ~1,893 ETH. Contracts untouched; refunds promised.