ChainCatcher reports that, according to the GoPlus Chinese community, the prediction market platform Polymarket was hacked due to a design flaw in the synchronization mechanism between off-chain and on-chain transaction results in its order system.
The attacker manipulated nonces to cause on-chain matched transactions to be canceled or invalidated before settlement, while off-chain records remained valid, leading to API false positives, affecting trading bots like Negrisk and causing user losses. The attack process is as follows: 1. The attacker submits or matches large reverse trades with market-making bots on Polymarket’s off-chain order book. 2. The attacker constructs transactions with forged or duplicate nonces or exploits on-chain nonce competition, ensuring the on-chain transaction reverts. 3. Polymarket’s API returns “Trade Successful” to the bot before on-chain confirmation, causing the bot to believe the position has been hedged, while the on-chain state has not yet changed. 4. The attacker then exploits the exposed direction by executing a real on-chain transaction, achieving “risk-free” profit. 5. Since the revert occurs on the blockchain layer, Polymarket’s fees do not explode, making the attack cost manageable and sustainable. GoPlus recommends users pause automated trading tools, verify on-chain transaction statuses, strengthen wallet security, and closely monitor official Polymarket announcements.
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Related Articles
Polymarket Announces Opening of World's First Prediction Bar Equipped with Real-Time Data Monitoring System
Gate News reports that on March 18, Polymarket announced the opening of the world's first prediction bar dedicated to "situational monitoring." The bar will feature real-time X information streams, flight radar, Bloomberg terminals, and Polymarket monitoring screens, all focused on delivering real-time news, flight information, market data, and prediction market insights.
GateNews17m ago
Polymarket Acquires DeFi Infrastructure Startup Brahma, Deal Amount Undisclosed
Polymarket announced on March 18 the acquisition of startup Brahma to optimize user experience and enhance DeFi liquidity. Brahma focuses on providing DeFi infrastructure and has processed over $1 billion in transactions. The acquisition will conclude Brahma's projects with existing partners and aims to streamline wallet and asset operations.
GateNews1h ago
Trust Wallet integrates the prediction market protocol Predict.fun
Gate News reported that on March 18, Trust Wallet has integrated the prediction market protocol Predict.fun into its "Predictions" tab within its application. Users can trade outcomes of events across multiple categories including sports, politics, and cryptocurrencies on BNB Chain using USDT without downloading a new app.
GateNews1h ago
Iran states it will retaliate for the attack on energy facilities, and the Revolutionary Guards will issue warnings to Gulf countries.
Gate News report: On March 18, according to Iranian media reports, Iran will retaliate against attacks on its energy infrastructure by striking enemy targets previously considered safe. Additionally, Iran's Revolutionary Guards are about to issue a warning to Gulf countries.
On prediction market Polymarket, a new market titled "When will Iran take military action against a Gulf country?" shows probabilities of 88% for today (March 18), 88% for March 19, and 87% for March 20.
GateNews2h ago
Polymarket Profitable Account with $230K Wins $54K Bet on BLG Defeating G2
On Polymarket prediction event, an account bet $54,000 on BLG to defeat G2, with an opening price of 82¢. This is LOL's first international event in 2026, with BLG defeating BFX 3:2 in the first round and G2 defeating TSW 3:0. The match will take place at 9 PM tonight.
GateNews3h ago
CFTC Chair: Arizona's Lawsuit Against Kalshi Is a Jurisdictional Dispute, Escalating to Criminal Prosecution Is Entirely Inappropriate
US Commodity Futures Trading Commission Chair Selig responded to Arizona's criminal charges against Kalshi, characterizing the matter as a jurisdictional dispute and stating that the charges are improper. Attorney General Mayes accused Kalshi of offering illegal gambling services, emphasizing that the company must comply with the law. The CFTC will closely monitor developments in the case.
GateNews4h ago
