Futures
Access hundreds of perpetual contracts
TradFi
Gold
One platform for global traditional assets
Options
Hot
Trade European-style vanilla options
Unified Account
Maximize your capital efficiency
Demo Trading
Introduction to Futures Trading
Learn the basics of futures trading
Futures Events
Join events to earn rewards
Demo Trading
Use virtual funds to practice risk-free trading
Launch
CandyDrop
Collect candies to earn airdrops
Launchpool
Quick staking, earn potential new tokens
HODLer Airdrop
Hold GT and get massive airdrops for free
Launchpad
Be early to the next big token project
Alpha Points
Trade on-chain assets and earn airdrops
Futures Points
Earn futures points and claim airdrop rewards
More
Polymarket account theft controversy: Magic Labs vulnerability exposed, official information vague
【Blockchain Rhythm】In recent days, Polymarket users have experienced a collective account theft incident, causing a stir on X and Reddit. Victims have posted detailed accounts of their losses on social media, sparking widespread discussion.
The root cause has been uncovered— the issue stems from Magic Labs, a third-party identity verification provider. Magic Labs’ service allows users to log in directly with their email to create Ethereum wallets, which sounds very convenient and has indeed attracted many Web3 newcomers. However, this vulnerability was exploited.
On December 24, Polymarket officially acknowledged the incident on Discord, stating that they discovered and fixed a security issue affecting some users, originating from a vulnerability in the third-party identity verification provider.
However, what’s interesting is that Polymarket’s official response is somewhat vague. They did not specify exactly how many users were affected or how much funds were stolen, nor did they name the third-party service provider involved. They simply said, “The issue has been resolved, with no potential risks,” trying to brush it off. Such an attitude indeed raises concerns. For users, this lack of information can increase anxiety—only detailed figures and transparent explanations can truly instill confidence.
---
Polymarket's official response is really perfunctory, no wonder everyone is upset
---
Logging in with email to access the wallet sounds a bit unreliable, it's normal for newbies to fall into traps
---
Only speaking up on the 24th? Were they pretending not to see it before?
---
Third-party verification services still need to be cautious; this time the lesson is painfully clear
---
Another announcement claiming "fixed" but with vague details, feels suspicious
---
Magic Labs has failed again, now I trust those so-called partners even less, might as well manage the funds myself
---
Is this all the official has? Recognized only on the 24th? Luckily it was uncovered, or else they would have kept it under wraps
---
Oh my, I knew email login was unreliable, newbies keep jumping into the pit, how many more people will have to be compensated this time
---
Polymarket is getting anxious, from this attitude I can tell how big the trap is, what can be done to fix it
---
The official response from Polymarket is way too perfunctory; do they just want to move on like this?
---
Logging in with email was supposed to be convenient, but it turned out to be a major vulnerability—so ironic.
---
Those who got hacked, you can't just accept it like that.
---
Why did it take until December to discover such a basic security issue? Why didn't they fix it earlier?
---
Newbie retail investors are really being cut like this; I hate these third-party service providers.
---
Is the official "fix" enough? What about compensation?
---
It's Magic Labs again; this company should just change its name to Magic Tricks.
---
How many more pitfalls does the entire Web3 space have to step into? It's so despairing.
---
I heard some people suffered significant losses. Are they just going to accept it like that?
Stop asking me why I still use Polymarket. I just like gambling.
Their official attitude... Are you trying to make everyone patch the vulnerabilities themselves?
Once again, a third party takes the blame, Polymarket is recovering very quickly.
Magic Labs: "It's not our fault" Polymarket: "It's not our fault" Users: "???"
Getting exploited for a profit once a month is really the norm in Web3 life.
Fortunately, I transferred out the money I was willing to gamble with in advance. Looks like I escaped this time.