Polymarket hacked, with vulnerabilities in the off-chain and on-chain transaction result synchronization mechanism

ChainCatcher reports that, according to the GoPlus Chinese community, the prediction market platform Polymarket was hacked due to a design flaw in the synchronization mechanism between off-chain and on-chain transaction results in its order system.

The attacker manipulated nonces to cause on-chain matched transactions to be canceled or invalidated before settlement, while off-chain records remained valid, leading to API false positives, affecting trading bots like Negrisk and causing user losses. The attack process is as follows: 1. The attacker submits or matches large reverse trades with market-making bots on Polymarket’s off-chain order book. 2. The attacker constructs transactions with forged or duplicate nonces or exploits on-chain nonce competition, ensuring the on-chain transaction reverts. 3. Polymarket’s API returns “Trade Successful” to the bot before on-chain confirmation, causing the bot to believe the position has been hedged, while the on-chain state has not yet changed. 4. The attacker then exploits the exposed direction by executing a real on-chain transaction, achieving “risk-free” profit. 5. Since the revert occurs on the blockchain layer, Polymarket’s fees do not explode, making the attack cost manageable and sustainable. GoPlus recommends users pause automated trading tools, verify on-chain transaction statuses, strengthen wallet security, and closely monitor official Polymarket announcements.

View Original
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.

Related Articles

He earned $300,000 on Polymarket by relying on Elon Musk's tweets.

Player noovd profited $345,000 in the market predicting Elon Musk's weekly tweet count. He focuses on undervalued prediction ranges and improves success rates through in-depth analysis of tweet data. This strategy relies on strong execution and data analysis, demonstrating the importance of in-depth research.

動區BlockTempo41m ago

Trump orders release of UFO files, Polymarket "alien life confirmation" betting surge to 20%

President Trump has directed relevant agencies to release files related to aliens and unidentified flying objects. His statement has caused the probability of "the United States confirming the existence of extraterrestrial life before 2027" on the prediction market Polymarket to surge to 20%. The market will move based on new official evidence, with details yet to be announced.

ChainNewsAbmedia1h ago

Finding the "golden key" for prediction markets through 27.73 million transaction data points, yet 690 K-line strategies struggle to turn a profit

Author: Frank, PANews How difficult is it to find a profitable "golden key" in prediction markets? On social media, you often see many people claiming to have discovered a clever money-making secret, but in reality, they say nothing substantial. What people can see are only the profit curves of these smart money moves, not the underlying logic. How exactly can one build a personal trading strategy that is suitable for prediction markets? Taking the BTC 15-minute prediction market as an example, PANews analyzed nearly 27.73 million trades across 3082 windows over the past month and arrived at some conclusions that may challenge conventional wisdom. In previous articles, we already analyzed the macro data of this market. This time, we will delve into the details to search for that possible "golden key." Illusion shattered: The complete failure of candlestick technical analysis Have you ever considered a strategy that...

PANews1h ago

Polymarket predicts that the probability of the United States confirming the existence of aliens before 2027 has surged to 22%.

The predicted probability on Polymarket that the United States will confirm the existence of aliens before 2027 has risen from 10% to 22%. Trump stated that he will instruct relevant agencies to declassify government documents related to extraterrestrial life and unidentified phenomena in response to public concern.

GateNewsBot3h ago

Tradeweb's investment prediction market platform Kalshi, expanding access for institutional users

Tradeweb Markets Inc., listed on NASDAQ, has reached a strategic partnership with event market Kalshi, acquiring a minority stake. The plan is to integrate Kalshi data into the Tradeweb platform. This move aims to enhance institutional investors' access to event contracts and develop analytical tools to assist in macro risk assessment and capital allocation.

GateNewsBot4h ago

Trump considers limited military strikes on Iran, with the probability of attack rising to 60% by the end of March

Trump is considering limited military strikes against Iran to push for a nuclear agreement; failure to comply could lead to a large-scale attack, escalating regional tensions. Iran has opposed this, stating it will respond defensively. Prediction markets show the probability of the U.S. striking Iran is increasing.

GateNewsBot5h ago
Comment
0/400
No comments
Trade Crypto Anywhere Anytime
qrCode
Scan to download Gate App
Community
  • 简体中文
  • English
  • Tiếng Việt
  • 繁體中文
  • Español
  • Русский
  • Français (Afrique)
  • Português (Portugal)
  • Bahasa Indonesia
  • 日本語
  • بالعربية
  • Українська
  • Português (Brasil)