Polymarket hacked, with vulnerabilities in the off-chain and on-chain transaction result synchronization mechanism

ChainCatcher reports that, according to the GoPlus Chinese community, the prediction market platform Polymarket was hacked due to a design flaw in the synchronization mechanism between off-chain and on-chain transaction results in its order system.

The attacker manipulated nonces to cause on-chain matched transactions to be canceled or invalidated before settlement, while off-chain records remained valid, leading to API false positives, affecting trading bots like Negrisk and causing user losses. The attack process is as follows: 1. The attacker submits or matches large reverse trades with market-making bots on Polymarket’s off-chain order book. 2. The attacker constructs transactions with forged or duplicate nonces or exploits on-chain nonce competition, ensuring the on-chain transaction reverts. 3. Polymarket’s API returns “Trade Successful” to the bot before on-chain confirmation, causing the bot to believe the position has been hedged, while the on-chain state has not yet changed. 4. The attacker then exploits the exposed direction by executing a real on-chain transaction, achieving “risk-free” profit. 5. Since the revert occurs on the blockchain layer, Polymarket’s fees do not explode, making the attack cost manageable and sustainable. GoPlus recommends users pause automated trading tools, verify on-chain transaction statuses, strengthen wallet security, and closely monitor official Polymarket announcements.

View Original
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.

Related Articles

Crypto Betting Platform Polymarket Lands Exclusive MLB Partnership

Major League Baseball has partnered with Polymarket for exclusive prediction market services while tightening betting regulations to mitigate risks of manipulation. An agreement with the CFTC enhances oversight on market integrity, addressing concerns raised by recent scandals.

LiveBTCNews1h ago

Bounce launches the prediction market product Bounce Predict, with the first application scenario being Sotheby's auction.

Gate News reported that on March 22, Bounce officially launched its new ecosystem product Bounce Predict. The product is positioned as a prediction market platform for auction scenarios. It has currently opened prediction markets for an upcoming Sotheby's auction, where users can use USDT to make price predictions on auction results.

GateNews2h ago

MLB Partners with Polymarket! New Era for Prediction Markets?

Major League Baseball (MLB) announced a partnership with prediction market exchange Polymarket, in which both parties will share information and establish an integrity framework. MLB will restrict high-risk markets and work to prevent manipulation and fraud. This collaboration has sparked legal and ethical controversies, with supporters arguing that regulation should be implemented to protect market integrity.

区块客11h ago

GLM-5 achieved a 42.99% return rate in the AI prediction market trading competition, becoming the only model to surpass the human benchmark

Zhipu Z.ai's global head Li Zixuan revealed that GLM-5 leads human benchmarks in the Prediction Arena prediction market with a 42.99% return rate, becoming the only AI model to surpass humans. The model executed 98 trades with outstanding performance.

GateNews12h ago

Polymarket predicts that the probability of Bitcoin falling to $65,000 in March has increased to 49%.

Gate News, on March 22, as Bitcoin briefly dropped below $69,000, the prediction probability of "Bitcoin falls to $65,000 in March" on the Polymarket prediction market rose to 49%. Additionally, the probability of predicting Bitcoin falling to $60,000 is 16%, and the probability of predicting it rising to $80,000 is 12%.

GateNews14h ago

Polymarket Data: Probability of Bitcoin Exploring 45,000 USD Within the Year at 47%, Higher Than the 38% Probability of Returning to 100,000 USD

Gate News reports that on March 22, data from the prediction market Polymarket shows that the probability of Bitcoin falling to $45,000 within the year is currently 47%, higher than the 38% chance of it returning to $100,000, indicating a somewhat weaker short-term outlook. This data is based on the prediction market on its platform titled "What price will Bitcoin reach in 2026?"

GateNews15h ago
Comment
0/400
No comments