@0xngmi tracked $2.7M in losses from the Polymarket hack, saying the attacker hit a web performance tracking company whose scripts were loaded on Polymarket, so every visitor got exposed, though seeds are safe
[1]Microtrend / Rank 19 / Week of Oct 25 – Oct 31
Polymarket hit by third-party script hack as Binance outflows dominate the week
Attention
Who was talking, day by day
What happened
On 2026-10-29, @0xngmi posted that he tracked $2.7M in losses from a Polymarket hack and that the attacker compromised a web performance tracking company whose scripts were loaded on Polymarket, exposing every visitor to the site. @buildwithsid's October recap listed Polymarket got hacked alongside PHP, Railway, OpenCode, Binance, GitHub Actions, SoftBank, Cursor marketplace, Coinbase vendor, Fireworks AI, LiteLLM, Capcom, npm packages, TiDB Cloud and Warp's vendor. @healthranger quoted @autonomous_chad claiming Polymarket is requiring hack victims to sign an NDA with full KYC and a no-public-criticism clause to receive refunds. The Polymarket claims were dwarfed by the Binance story: @watcherguru reported over $5.6B stolen across BTC, ETH, TRX, XAUT, USDT, USDC, WBETH and RLUSD, and @wallstreetbets summarized up to $5.8B in suspicious Binance outflows, Tether freezing over $1.5B in USDT and Circle over $800M in USDC.
Why it matters
Polymarket's hack was a supply-chain compromise of a third-party web performance tracker, a reminder that prediction-market front ends inherit risk from vendor scripts even when user seeds are safe. The story competed for attention with a much larger Binance incident, so the crypto-native conversation split between the two on the same day.
Observed reaction
Mocking and alarmist: @doggintrump said people lost millions and laughed, @jbondwagon framed it as a CT shouting match between Polymarket's $2.6M and Binance's $6B, and @maziiiarkrm satirized the week as 'keep your ass tight'. @0xngmi was calm, saying seeds are safe and not to freak out, while @healthranger was angry about the NDA terms.
Spread
Where it started and who carried it
- First seen
- Oct 26, 12:39 UTC by @web3tokenomics
- Accounts
- 2 tracked · 12 elsewhere on X
- Communities
- general ct (1), memecoins solana (1)
- Key accounts
- @buildwithsid, @moreperfectus, @rashid971x, @0xngmi, @doggintrump
Explainability
Evidence register
@buildwithsid's October recap listed Polymarket got hacked alongside PHP, Railway, OpenCode, Binance, GitHub Actions, SoftBank, Cursor marketplace, Coinbase vendor, Fireworks AI, LiteLLM, Capcom, npm packages, TiDB Cloud and Warp's vendor
[1]@healthranger, quoting @autonomous_chad, said Polymarket is demanding hack victims sign an NDA to get refunds, with full KYC, a no-public-criticism clause, waived claims and confidential settlement terms
[1]@doggintrump said Polymarket got hacked and people lost millions
[1]@jbondwagon framed the day as Polymarket traders shouting about a $2.6M hack while the rest of CT shouted about Binance's $6B hack
[1]@watcherguru reported Binance was hacked with over $5.6B stolen across BTC, ETH, TRX, XAUT, USDT, USDC, WBETH and RLUSD, as quoted by @genxgirl1994
[1]@wallstreetbets summarized up to $5.8B in suspicious Binance wallet outflows, Tether freezing over $1.5B in USDT, Circle freezing over $800M in USDC, BTC below $79K and over $600M liquidated in an hour
[1]@0x0sojalsec listed Polymarket got hacked among a Black October recap including a Binance hot wallet drain of 6.3B
[1]@maziiiarkrm satire said Polymarket got hacked and Binance got hacked, calling it a great end to uptober
[1]@rashid971x listed Polymarket got hacked alongside Binance getting hacked for $6B and Google, Amazon and Intel drops, with BTC down only 2%
[1]Angles
- Break down how a web performance tracking vendor's script on Polymarket exposed every visitor, and why seeds stayed safe
- Compare the two same-day headlines: Polymarket's reported $2.7M loss vs Binance's $5.6B+ outflows
- Examine the reported NDA and full-KYC requirement for hack refunds, which some accounts are calling a gag clause
Formats in use
- one-line joke formulation comparing two hacks
- bullet-list October recap thread
- quote-post of another account's breaking news
- screenshot/repost of a list
Risks
- The hack, the $2.7M loss figure and the NDA/refund terms are all unverified claims from posts, not confirmed by Polymarket
- Do not treat the Binance $5.6B/$5.8B/$6B figures as settled; they are post claims and the market block is empty
- No financial advice or price predictions; avoid presenting Polymarket as safe or unsafe based on unconfirmed posts
Observed content
Most-engaged posts
> polymarket got hacked > binance got hacked > keep your ass tight!!! uptober was super great, now it is also ending in a great way gg https://t.co/TaKjGCWZNYOpen on X →
Polymarket got banned across a lot of countries, expect pumpfun app to get the same treatment soon. Pumpfun is arguably even worse than polymarketOpen on X →
October in a nutshell: - PHP got hacked - Railway got hacked - OpenCode got hacked - Binance got hacked - Polymarket got hacked - GitHub Actions got hacked - SoftBank got hacked - Cursor marketplace got hacked - Coinbase vendor got hacked - Fireworks AI got hacked - LiteLLM gotOpen on X →
Polymarket got the Brazilian election completely wrong. The glorified gambling platform had Flavio Bolsonaro's odds at over 80% all the way up to the day voting took place. Lula ended up with 51.8% of the vote. https://t.co/FqOyzFYjzuOpen on X →
In the last 24 hours: Google dropped 12%. Amazon dropped 12%. Intel dropped 20%. Binance got hacked for $6B. Polymarket got hacked. And BTC is down only 2%. Everyone knows what this means.Open on X →
Tracked 2.7m losses from polymarket hack Attacker attacked a company that does web performance tracking and whose scripts were being pulled on polymarket so everyone who visited polymarket got exposed (seeds are safe tho!) i wouldnt freak out, instead better to set on handsOpen on X →
History