A hacker is currently stealing funds from a contract on the Polymarket platform, specifically the UMA CTF Adapter on Polygon. The attack was first noticed by blockchain investigator ZachXBT, and losses have increased from $520,000 to over $660,000. The attacker is withdrawing around 5,000 POL tokens every 30 seconds.
Multiple sources, including Bubblemaps, Lookonchain, and PeckShield, have verified that an exploit is currently happening. Users are being urged to stop all activity on Polymarket right away.
How the Attack Is Unfolding
An attacker is repeatedly withdrawing small amounts of POL tokens – about 5,000 per transaction – from contracts connected to Polymarket’s UMA CTF Adapter on Polygon. These withdrawals are happening every 30 seconds, and the total stolen has already surpassed $660,000 and continues to grow.
Security researchers at PeckShield and ZachXBT have identified a potential exploit affecting the Polymarket UMA CTF Adapter contract on the Polygon network. Two addresses have had roughly $520,000 drained, and the attacker has begun moving the stolen funds.
— PeckShieldAlert (@PeckShieldAlert) May 22, 2026
Making it harder to recover the stolen money, the attacker has already divided it between 15 different digital wallets. Some of the funds have also been sent to ChangeNOW, a service that swaps currencies and hides where the money originally came from.
The main address used in the attack has been found to be 0x8F98075db5d6C620e8D420A8c516E2F2059d9B91. Security firm PeckShield also identified two other addresses that were emptied as a result: 0x871D…9082 and 0xf61e…4805.
Polymarket’s Response
Polymarket is looking into a recent problem, but says that users’ funds on the platform are currently secure. The issue seems to be limited to a specific part of the system – the UMA CTF Adapter contract – and hasn’t affected Polymarket’s main infrastructure.
As of this moment, authorities haven’t released any additional information about the ongoing attack.
What Users Should Do
Polymarket users are being advised by security experts to temporarily stop using the platform until the recent security issue is fixed and Polymarket provides an official announcement. If you have funds in Polymarket contracts that use the UMA CTF Adapter on Polygon, please check your holdings carefully.
The security issue is still happening, and we anticipate the financial impact will continue to grow until the problem is fully resolved.
Read More
- Pi Hotel Vietnam: First to Accept Pi Coin Payments in Real-World Transactions
- TAO PREDICTION. TAO cryptocurrency
- Brent Oil Forecast
- Why These 5 Meme Coins Could Crash or Cash Your Crypto Party in May 2025 🚀🐒
- Silver Rate Forecast
- USD TRY PREDICTION
- USD ARS PREDICTION
- Digital Rebellion: FET’s 50% Rally Shakes the Market!
- USD MXN PREDICTION
- 3 MASSIVE Token Unlocks That Could Blow Up the Market: HYPE, ENA, RED!
2026-05-22 13:53